Solaris
CVEs (497)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-1999-0254 | 0.00 | — | 0.04 | Nov 2, 1998 | A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. | |||
| CVE-1999-0186 | 0.00 | — | 0.04 | Oct 1, 1998 | In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | |||
| CVE-1999-0302 | 0.00 | — | 0.02 | Sep 1, 1998 | SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server. | |||
| CVE-1999-0065 | 0.00 | — | 0.03 | Aug 31, 1998 | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. | |||
| CVE-1999-0339 | 0.00 | — | 0.00 | Aug 1, 1998 | Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. | |||
| CVE-1999-0213 | 0.00 | — | 0.02 | Jul 15, 1998 | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. | |||
| CVE-1999-0054 | 0.00 | — | 0.01 | Jun 10, 1998 | Sun's ftpd daemon can be subjected to a denial of service. | |||
| CVE-1999-0008 | 0.00 | — | 0.04 | Jun 8, 1998 | Buffer overflow in NIS+, in Sun's rpc.nisd program. | |||
| CVE-1999-0303 | 0.00 | — | 0.00 | May 21, 1998 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | |||
| CVE-1999-0055 | 0.00 | — | 0.00 | May 14, 1998 | Buffer overflows in Sun libnsl allow root access. | |||
| CVE-1999-1027 | 0.00 | — | 0.00 | May 7, 1998 | Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program. | |||
| CVE-1999-0212 | 0.00 | — | 0.02 | Apr 29, 1998 | Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server. | |||
| CVE-1999-0190 | 0.00 | — | 0.00 | Apr 8, 1998 | Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. | |||
| CVE-1999-1118 | 0.00 | — | 0.00 | Mar 11, 1998 | ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters. | |||
| CVE-1999-0795 | 0.00 | — | 0.02 | Mar 1, 1998 | The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. | |||
| CVE-1999-0320 | 0.00 | — | 0.01 | Mar 1, 1998 | SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files. | |||
| CVE-1999-0296 | 0.00 | — | 0.00 | Feb 1, 1998 | Solaris volrmmount program allows attackers to read any file. | |||
| CVE-1999-0273 | 0.00 | — | 0.01 | Jan 1, 1998 | Denial of service through Solaris 2.5.1 telnet by sending ^D characters. | |||
| CVE-1999-0097 | 0.00 | — | 0.04 | Oct 29, 1997 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | |||
| CVE-1999-0295 | 0.00 | — | 0.00 | Oct 1, 1997 | Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. |
- CVE-1999-0254Nov 2, 1998risk 0.00cvss —epss 0.04
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
- CVE-1999-0186Oct 1, 1998risk 0.00cvss —epss 0.04
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
- CVE-1999-0302Sep 1, 1998risk 0.00cvss —epss 0.02
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
- CVE-1999-0065Aug 31, 1998risk 0.00cvss —epss 0.03
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
- CVE-1999-0339Aug 1, 1998risk 0.00cvss —epss 0.00
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
- CVE-1999-0213Jul 15, 1998risk 0.00cvss —epss 0.02
libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
- CVE-1999-0054Jun 10, 1998risk 0.00cvss —epss 0.01
Sun's ftpd daemon can be subjected to a denial of service.
- CVE-1999-0008Jun 8, 1998risk 0.00cvss —epss 0.04
Buffer overflow in NIS+, in Sun's rpc.nisd program.
- CVE-1999-0303May 21, 1998risk 0.00cvss —epss 0.00
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
- CVE-1999-0055May 14, 1998risk 0.00cvss —epss 0.00
Buffer overflows in Sun libnsl allow root access.
- CVE-1999-1027May 7, 1998risk 0.00cvss —epss 0.00
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program.
- CVE-1999-0212Apr 29, 1998risk 0.00cvss —epss 0.02
Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
- CVE-1999-0190Apr 8, 1998risk 0.00cvss —epss 0.00
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
- CVE-1999-1118Mar 11, 1998risk 0.00cvss —epss 0.00
ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
- CVE-1999-0795Mar 1, 1998risk 0.00cvss —epss 0.02
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
- CVE-1999-0320Mar 1, 1998risk 0.00cvss —epss 0.01
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
- CVE-1999-0296Feb 1, 1998risk 0.00cvss —epss 0.00
Solaris volrmmount program allows attackers to read any file.
- CVE-1999-0273Jan 1, 1998risk 0.00cvss —epss 0.01
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
- CVE-1999-0097Oct 29, 1997risk 0.00cvss —epss 0.04
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
- CVE-1999-0295Oct 1, 1997risk 0.00cvss —epss 0.00
Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
Page 24 of 25