Sun Solaris vulnerabilities, page 5
436 vulnerabilities
Known vulnerabilities in Sun Solaris, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2007-3069sun · solarissun solarisxscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence.EPSS0.36%MediumCVE-2007-3283sun · solarissun solarisGNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console.EPSS0.34%HighCVE-2007-3470sun · solarissun solarisMultiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors related to "memory buffers" of Secure Socket Layer (SSL) records.EPSS3.32%LowCVE-2001-1503sun · solaris +1 moresun solarisThe finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.EPSS0.76%MediumCVE-2001-1555sun · solaris +1 moresun solarispt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY.EPSS0.44%HighCVE-2001-1076sun · solaris +1 moresun solarisBuffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.EPSS1.40%HighCVE-2001-1582sun · solaris +1 moresun solarisBuffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.EPSS1.30%HighCVE-2001-1414sun · solaris +1 moresun solarisThe Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.EPSS1.53%CriticalCVE-2001-0236sun · solaris +1 moresun solarisBuffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.EPSS72.04%HighCVE-2001-0115sun · solaris +1 moresun solarisBuffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.EPSS1.21%HighCVE-2001-0124sun · solaris +1 moresun solarisBuffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.EPSS0.39%MediumCVE-2001-0565sun · solaris +1 moresun solarisBuffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.EPSS1.28%MediumCVE-2001-0421sun · solaris +1 moresun solarisFTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.EPSS6.21%HighCVE-2001-0426sun · solaris +1 moresun solarisBuffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.EPSS0.87%CriticalCVE-2001-0797hp · hp-ux +5 morehp hp-uxBuffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.EPSS94.92%HighCVE-2001-0401sun · solaris +1 moresun solarisBuffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.EPSS0.98%CriticalCVE-2001-0554debian · debian_linux +10 moredebian debian_linuxBuffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.EPSS38.75%HighCVE-2001-0190sun · solaris +1 moresun solarisBuffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).EPSS0.39%MediumCVE-2001-0594sun · solaris +1 moresun solariskcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.EPSS0.95%HighCVE-2001-0165sun · solaris +1 moresun solarisBuffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.EPSS0.95%