CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

SUN : Security Vulnerabilities (CVSS score between 7 and 7.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
251 CVE-2003-0064 Exec Code 2003-03-03 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
252 CVE-2003-0028 Exec Code Overflow 2003-03-25 2020-01-21
7.5
None Remote Low Not required Partial Partial Partial
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
253 CVE-2002-2197 DoS 2002-12-31 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference.
254 CVE-2002-2036 2002-12-31 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
255 CVE-2002-2005 2002-12-31 2011-03-08
7.5
None Remote Low Not required Partial Partial Partial
Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.
256 CVE-2002-1980 Exec Code Overflow 2002-12-31 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors.
257 CVE-2002-1871 2002-12-31 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.
258 CVE-2002-1590 264 DoS +Priv 2002-10-29 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.
259 CVE-2002-1317 DoS Exec Code Overflow 2002-12-11 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
260 CVE-2002-1296 Exec Code Dir. Trav. 2002-12-23 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
261 CVE-2002-0994 2002-10-04 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
262 CVE-2002-0885 Exec Code Overflow 2002-10-04 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.
263 CVE-2002-0884 Exec Code 2002-10-04 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
264 CVE-2002-0678 2002-07-23 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
265 CVE-2002-0677 +Priv 2002-07-23 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
266 CVE-2002-0573 Exec Code 2002-07-03 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.
267 CVE-2002-0572 2002-07-03 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
268 CVE-2002-0387 Exec Code Overflow 2003-03-18 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.
269 CVE-2002-0360 Exec Code Overflow 2002-06-25 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.
270 CVE-2002-0348 DoS Exec Code 2002-06-25 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
271 CVE-2002-0346 XSS 2002-06-25 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
272 CVE-2002-0158 Overflow +Priv 2002-04-02 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
273 CVE-2002-0090 Exec Code Overflow 2002-03-15 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.
274 CVE-2002-0089 Overflow +Priv 2002-03-15 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
275 CVE-2002-0088 Overflow +Priv 2002-03-15 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
276 CVE-2002-0084 Overflow +Priv 2002-03-15 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
277 CVE-2002-0076 Exec Code 2002-03-19 2018-10-12
7.5
None Remote Low Not required Partial Partial Partial
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.
278 CVE-2001-1582 119 Exec Code Overflow 2001-12-31 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
279 CVE-2001-1480 2001-12-31 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
280 CVE-2001-1414 2001-10-09 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.
281 CVE-2001-1328 Exec Code Overflow 2001-06-22 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
282 CVE-2001-1308 DoS Exec Code 2001-07-16 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
283 CVE-2001-1307 DoS Exec Code Overflow 2001-07-16 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
284 CVE-2001-1306 DoS Exec Code 2001-07-16 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
285 CVE-2001-1076 Exec Code Overflow 2001-07-05 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
286 CVE-2001-1008 2001-08-31 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
287 CVE-2001-0922 2001-11-26 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.
288 CVE-2001-0701 Overflow +Priv 2001-09-20 2018-05-03
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.
289 CVE-2001-0699 Exec Code Overflow 2001-09-20 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.
290 CVE-2001-0652 Overflow +Priv 2001-10-30 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
291 CVE-2001-0634 DoS +Priv 2001-08-22 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.
292 CVE-2001-0632 +Priv 2001-08-22 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges.
293 CVE-2001-0470 Overflow +Priv 2001-06-27 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name.
294 CVE-2001-0426 Overflow +Priv 2001-07-02 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.
295 CVE-2001-0423 Exec Code Overflow 2001-07-02 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerability than CAN-2002-0093.
296 CVE-2001-0422 Exec Code Overflow 2001-07-02 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
297 CVE-2001-0403 2001-06-18 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
298 CVE-2001-0401 Exec Code Overflow 2001-06-18 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
299 CVE-2001-0229 +Priv 2001-05-03 2008-09-05
7.2
None Local Low Not required Complete Complete Complete
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
300 CVE-2001-0190 Overflow +Priv 2001-03-26 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
Total number of vulnerabilities : 404   Page : 1 2 3 4 5 6 (This Page)7 8 9
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.