Product:

Solaris

(Sun)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 456
Date Id Summary Products Score Patch Annotated
1999-12-22 CVE-2000-0030 Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. Solaris, Sunos N/A
1999-12-31 CVE-1999-1587 /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option. Solaris, Sunos N/A
1998-07-16 CVE-1999-1432 Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges. Solaris, Sunos N/A
1997-06-26 CVE-1999-1423 ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i. Solaris, Sunos N/A
1997-07-30 CVE-1999-1419 Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges. Solaris, Sunos N/A
1996-08-03 CVE-1999-1413 Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg. Solaris, Sunos N/A
1997-05-17 CVE-1999-1402 The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket. Freebsd, Solaris, Sunos N/A
1997-08-24 CVE-1999-1225 rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not. Ultrix, Linux_kernel, Netbsd, Openbsd, Solaris N/A
1997-05-19 CVE-1999-1191 Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. Solaris, Sunos N/A
1993-10-01 CVE-1999-1137 The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone. Solaris, Sunos N/A