SU
Product
Sunos
561
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Sunos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-1586 | – | Dec 3 | Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-1585 | – | Nov 8 | Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network… Affected: 5.8 |
| CVE-2002-1590 | – | Oct 29 | The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later,… Affected: 5.8 |
| CVE-2002-1228 | – | Oct 28 | Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon Affected: 5.5; 5.5.1; 5.7; 5.8 |
| CVE-2002-1199 | – | Oct 28 | The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on… Affected: 5.7; 5.8 |
| CVE-2002-1589 | – | Oct 24 | Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of… Affected: 5.8 |
| CVE-2002-0885 | – | Oct 4 | Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute… Affected: 5.7; 5.8 |
| CVE-2002-0884 | – | Oct 4 | Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to… Affected: 5.7; 5.8 |
| CVE-2002-0679 | – | Sep 5 | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-0797 | – | Aug 12 | Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges Affected: 5.6; 5.7; 5.8 |
| CVE-2002-0796 | – | Aug 12 | Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges Affected: 5.6; 5.7; 5.8 |
| CVE-2002-0436 | – | Jul 26 | sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter Affected: 5.7; 5.8 |
| CVE-2002-0678 | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-0677 | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-0573 | – | Jul 3 | Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is… Affected: 5.7; 5.8 |
| CVE-2002-0572 | – | Jul 3 | FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2002-0033 | – | May 29 | Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name Affected: All versions, or not specified |
| CVE-2002-0158 | – | Apr 2 | Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument Affected: All versions, or not specified |
| CVE-2002-0085 | – | Mar 15 | cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request Affected: 5.7 |
| CVE-2002-0089 | – | Mar 15 | Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument… Affected: 5.5; 5.5.1; 5.7 |
| CVE-2002-0088 | – | Mar 15 | Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path Affected: 5.7 |
| CVE-2002-0084 | – | Mar 15 | Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument Affected: 5.7 |
| CVE-2001-1503 | – | Dec 31 | The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g… Affected: 5.5; 5.5; 5.5.1; 5.5.1; 5.6; 5.6; +4 more |
| CVE-2001-1583 | – | Dec 31 | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when… Affected: through 5.9 |
| CVE-2001-1582 | – | Dec 31 | Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a… Affected: 5.8 |
| CVE-2001-1555 | – | Dec 31 | pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying… Affected: 5.8 |
| CVE-2001-0797 | – | Dec 12 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as… Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +3 more |
| CVE-2001-0652 | – | Oct 30 | Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable Affected: through 5.9 |
| CVE-2001-0779 | – | Oct 18 | Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username Affected: 5.7; 5.8 |
| CVE-2001-1414 | – | Oct 9 | The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2001-0699 | – | Sep 20 | Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument Affected: 5.8 |
| CVE-2001-0554 | – | Aug 14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You… Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +3 more |
| CVE-2001-0565 | – | Aug 14 | Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option Affected: through 5.9; 5.5; 5.5.1; 5.7 |
| CVE-2001-0548 | – | Aug 14 | Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable Affected: 5.7 |
| CVE-2001-0594 | – | Aug 2 | kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument Affected: 5.7; 5.8 |
| CVE-2001-0595 | – | Aug 2 | Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g Affected: 5.7; 5.8 |
| CVE-2001-0353 | – | Jul 21 | Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine Affected: 5.7; 5.8 |
| CVE-2001-1244 | – | Jul 7 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small… Affected: 5.5.1; 5.7; 5.8 |
| CVE-2001-1076 | – | Jul 5 | Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable Affected: 5.5; 5.5.1; 5.7; 5.8 |
| CVE-2001-0426 | – | Jul 2 | Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable Affected: 5.7; 5.8 |
| CVE-2001-0422 | – | Jul 2 | Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable Affected: 5.3; 5.4; 5.5; 5.5.1; 5.7; 5.8 |
| CVE-2001-0421 | – | Jul 2 | FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid… Affected: through 5.9 |
| CVE-2001-0470 | – | Jun 27 | Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name Affected: 5.8 |
| CVE-2001-1328 | – | Jun 22 | Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code Affected: 5.4; 5.4; 5.5; 5.5; 5.5.1; 5.5.1; +6 more |
| CVE-2001-0403 | – | Jun 18 | /opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI Affected: 5.0 |
| CVE-2001-0401 | – | Jun 18 | Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable Affected: through 5.9; 5.5; 5.5.1; 5.7 |
| CVE-2001-0165 | – | May 3 | Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument Affected: 5.7; 5.8 |
| CVE-2001-0269 | – | May 3 | pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password Affected: 5.8 |
| CVE-2001-0236 | – | May 3 | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event Affected: 5.7; 5.8 |
| CVE-2001-0190 | – | Mar 26 | Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name… Affected: through 5.8; 5.4; 5.5; 5.5.1; 5.7 |
The 500 most important CVEs for this product (exploited first, then by severity)