SU
Product
Sunos
561
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Sunos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0999 | – | Jan 5 | Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files Affected: 5.7; 5.8 |
| CVE-2003-1066 | – | Dec 31 | Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long… Affected: 5.7; 5.8 |
| CVE-2003-1082 | – | Dec 31 | Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than… Affected: 5.7; 5.8 |
| CVE-2003-1076 | – | Dec 31 | Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a… Affected: 5.7; 5.8 |
| CVE-2003-1073 | – | Dec 31 | A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with Affected: 5.5; 5.5.1; 5.7; 5.8 |
| CVE-2003-0914 | – | Dec 15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL… Affected: 5.7; 5.8 |
| CVE-2003-1056 | – | Dec 11 | The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files Affected: 5.7; 5.8 |
| CVE-2003-1057 | – | Dec 8 | Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code Affected: 5.7; 5.8 |
| CVE-2003-1058 | – | Dec 3 | The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or… Affected: 5.7; 5.8 |
| CVE-2003-1059 | – | Nov 20 | Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-1060 | – | Oct 27 | The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference Affected: 5.7; 5.8 |
| CVE-2003-1061 | – | Oct 14 | Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines Affected: 5.7; 5.8 |
| CVE-2003-0694 | – | Oct 6 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c Affected: 5.7; 5.8 |
| CVE-2003-1081 | – | Sep 9 | Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file Affected: 5.8 |
| CVE-2003-0609 | – | Aug 27 | Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable Affected: 5.7; 5.8 |
| CVE-2003-0669 | – | Aug 27 | Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or an attack by local users Affected: 5.7; 5.8 |
| CVE-2003-1063 | – | Aug 20 | The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and… Affected: 5.7 |
| CVE-2003-1065 | – | Jul 23 | Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a denial of service (automountd crash) Affected: 5.8 |
| CVE-2003-1055 | – | Jul 3 | Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup Affected: 5.8 |
| CVE-2003-1067 | – | Jun 19 | Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges… Affected: 5.7; 5.8 |
| CVE-2003-1068 | – | Jun 6 | Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than… Affected: 5.7; 5.8 |
| CVE-2003-1069 | – | Jun 3 | The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop) Affected: 5.7; 5.8 |
| CVE-2003-0201 | – | May 5 | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-0196 | – | May 5 | Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-1070 | – | Apr 28 | Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash) Affected: 5.7; 5.8 |
| CVE-2003-1072 | – | Apr 28 | Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption) Affected: 5.8 |
| CVE-2003-0091 | – | Apr 2 | Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege Affected: 5.5.1; 5.7 |
| CVE-2003-0161 | – | Apr 2 | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length… Affected: 5.4; 5.5; 5.5.1; 5.7; 5.8 |
| CVE-2003-0092 | – | Apr 2 | Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1337 | – | Mar 7 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments… Affected: 5.7; 5.8 |
| CVE-2003-0064 | – | Mar 3 | The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-1078 | – | Feb 28 | The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login Affected: 5.7; 5.8 |
| CVE-2003-0058 | – | Feb 19 | MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain… Affected: 5.8 |
| CVE-2003-1079 | – | Feb 18 | Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-0027 | – | Feb 7 | Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2003-1075 | – | Jan 27 | Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other… Affected: 5.7; 5.8 |
| CVE-2003-1071 | – | Jan 3 | rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1763 | – | Dec 31 | The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session Affected: 5.8 |
| CVE-2002-2327 | – | Dec 31 | Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting… Affected: 5.8 |
| CVE-2002-2203 | – | Dec 31 | Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information Affected: 5.5.1; 5.7 |
| CVE-2002-2197 | – | Dec 31 | Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference Affected: 5.8 |
| CVE-2002-1980 | – | Dec 31 | Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1871 | – | Dec 31 | pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1584 | – | Dec 27 | Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain… Affected: 5.5.1; 5.7 |
| CVE-2002-1345 | – | Dec 23 | Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames… Affected: 5.7 |
| CVE-2002-1296 | – | Dec 23 | Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1323 | – | Dec 11 | Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_… Affected: 5.8 |
| CVE-2002-1317 | – | Dec 11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1587 | – | Dec 4 | The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the… Affected: 5.5.1; 5.7; 5.8 |
The 500 most important CVEs for this product (exploited first, then by severity)