Sun vulnerabilities

1,544 vulnerabilities

Known vulnerabilities in Sun products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 197 products.

Products

50 of 197

Sunos557 vulnerabilities
Solaris436 vulnerabilities
Jre423 vulnerabilities
Jdk392 vulnerabilities
Sdk126 vulnerabilities
Opensolaris108 vulnerabilities
Java System Web Server32 vulnerabilities
Java System Application Server22 vulnerabilities
Java System Identity Manager19 vulnerabilities
Java System Directory Server18 vulnerabilities
Ray Server Software15 vulnerabilities
Java Se13 vulnerabilities
Java System Access Manager13 vulnerabilities
One Application Server12 vulnerabilities
One Web Server12 vulnerabilities
Java System Web Proxy Server11 vulnerabilities
Staroffice9 vulnerabilities
Cluster8 vulnerabilities
J2Se7 vulnerabilities
Java7 vulnerabilities
Ehrd6 vulnerabilities
Java System Portal Server6 vulnerabilities
One Directory Server6 vulnerabilities
Solaris Answerbook26 vulnerabilities
Iplanet Messaging Server5 vulnerabilities
Java Desktop System5 vulnerabilities
Openjdk5 vulnerabilities
Openoffice.Org5 vulnerabilities
Solstice Adminsuite5 vulnerabilities
Virtualbox5 vulnerabilities
Chilisoft4 vulnerabilities
Grid Engine4 vulnerabilities
Iplanet Directory Server4 vulnerabilities
Iplanet Web Server4 vulnerabilities
Java Asp Server4 vulnerabilities
Java Plug In4 vulnerabilities
Java System Calendar Server4 vulnerabilities
Java Web Console4 vulnerabilities
N1 Grid Engine4 vulnerabilities
One Messaging Server4 vulnerabilities
Solstice Backup4 vulnerabilities
Crypto Accelerator 40003 vulnerabilities
Java Enterprise System3 vulnerabilities
Java System Communications Express3 vulnerabilities
Java System Messaging Server3 vulnerabilities
Java Web Start3 vulnerabilities
Javamail3 vulnerabilities
Jsse3 vulnerabilities
Management\+Center3 vulnerabilities
One Calendar Server3 vulnerabilities

CVE-2003-1573sunj2ee17y ago01-06-2009 22:00

EPSS score

5.04%

The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."CVE-2003-1066sunsolaris+121y ago08-02-2005 05:00

EPSS score

3.26%

Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.CVE-2003-1063sunsolaris+121y ago08-02-2005 05:00

EPSS score

1.54%

The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.CVE-2003-1126sunone_web_server21y ago12-03-2005 05:00

EPSS score

1.99%

Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.CVE-2003-1024sunsunos22y ago06-01-2004 05:00

EPSS score

0.36%

Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.CVE-2003-1072sunsolaris+121y ago08-02-2005 05:00

EPSS score

0.33%

Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).CVE-2003-1057sunsolaris+121y ago08-02-2005 05:00

EPSS score

0.42%

Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.CVE-2003-1055sunsolaris+121y ago08-02-2005 05:00

EPSS score

1.06%

Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.CVE-2003-1576sunchange_manager16y ago28-01-2010 20:00

EPSS score

4.88%

Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors.CVE-2003-1073sunsolaris+121y ago08-02-2005 05:00

EPSS score

0.69%

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.CVE-2003-1079sunsolaris+121y ago08-02-2005 05:00

EPSS score

2.41%

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.CVE-2003-1070sunsolaris+121y ago08-02-2005 05:00

EPSS score

1.59%

Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).CVE-2003-1077sunsolaris21y ago08-02-2005 05:00

EPSS score

0.33%

Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang).CVE-2003-1589sunone_web_server16y ago25-02-2010 19:00

EPSS score

1.22%

Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors.CVE-2003-1081sunsolaris+121y ago08-02-2005 05:00

EPSS score

2.37%

Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file.CVE-2003-1590sunone_web_server16y ago25-02-2010 19:00

EPSS score

1.63%

Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to cause a denial of service (daemon crash) via unknown vectors.CVE-2003-1563suncluster18y ago18-08-2008 19:00

EPSS score

0.29%

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.CVE-2003-1068sunsolaris+121y ago08-02-2005 05:00

EPSS score

0.39%

Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.CVE-2003-1061sunsolaris+121y ago08-02-2005 05:00

EPSS score

0.29%

Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines.CVE-2003-1076sunsolaris+121y ago08-02-2005 05:00

EPSS score

0.35%

Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a .forward file.