SO
Product
Solaris
450
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-1480 | – | Mar 24 | rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request Affected: 10 |
| CVE-2008-1356 | – | Mar 17 | Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System (JDS), when using the GNOME On-Screen Keyboard (GOK), allows local users to bypass authentication… Affected: 10; 10 |
| CVE-2008-1317 | – | Mar 13 | Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service (reboot) via blocked… Affected: 10; 10 |
| CVE-2008-1205 | – | Mar 8 | Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a… Affected: 10; 10 |
| CVE-2008-1115 | – | Mar 3 | Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands Affected: 8; 8 |
| CVE-2008-1095 | – | Feb 29 | Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial… Affected: 8; 9; 10 |
| CVE-2008-0933 | – | Feb 25 | Multiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service (panic) via unspecified… Affected: 10.0; 10.0; 10.0 |
| CVE-2008-0938 | – | Feb 25 | Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive… Affected: 10; 10 |
| CVE-2008-0836 | – | Feb 20 | Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service (panic) via unspecified… Affected: 9; 10 |
| CVE-2008-0730 | – | Feb 12 | The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a)… Affected: 10; 10; 10; 10; 10; 10 |
| CVE-2008-0718 | – | Feb 12 | Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via… Affected: 9; 9; 10; 10 |
| CVE-2008-0242 | – | Jan 12 | Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions Affected: 10.0; 10.0 |
| CVE-2007-6505 | – | Dec 20 | Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root,… Affected: 9; 9 |
| CVE-2007-6413 | – | Dec 17 | Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attackers to bypass certain netgroup restrictions and obtain root… Affected: 10; 10 |
| CVE-2007-6225 | – | Dec 4 | Unspecified vulnerability in Sun Solaris 10, when 64bit mode is used on the x86 platform, allows local users in a Linux (lx) branded zone to cause a denial of service (panic) via… Affected: 10 |
| CVE-2007-6216 | – | Dec 4 | Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some… Affected: 10 |
| CVE-2007-6180 | – | Nov 30 | Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to cause a denial of service (NULL dereference and panic) via… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-5716 | – | Oct 30 | Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors, probably… Affected: 10.0; 10.0 |
| CVE-2007-5726 | – | Oct 30 | Unspecified vulnerability in the Stream Control Transmission Protocol (sctp) functionality in Sun Solaris 10, when at least one SCTP socket is in the LISTEN state, allows remote… Affected: 10.0; 10.0 |
| CVE-2007-5632 | – | Oct 23 | Multiple unspecified vulnerabilities in the kernel in Sun Solaris 8 through 10 allow local users to cause a denial of service (panic), related to the support for retrieval of… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-5462 | – | Oct 15 | Unspecified vulnerability in the Sun Solaris RPC services library (librpcsvc) on Solaris 8 through 10 allows remote attackers to cause a denial of service (mountd crash) via… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-5365 | – | Oct 11 | Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-5367 | – | Oct 11 | Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors Affected: 10.0; 10.0 |
| CVE-2007-5368 | – | Oct 11 | Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multiple application hang) via unspecified… Affected: 10.0; 10.0 |
| CVE-2007-5319 | – | Oct 9 | Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 8, 9, and 10 allows local users with console (/dev/console) access to cause a denial of service… Affected: 8.0; 9.0; 10.0 |
| CVE-2007-5132 | – | Sep 27 | Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors related to "the handling of thread… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-5118 | – | Sep 27 | Unspecified vulnerability in the HID (Human Interface Device) class driver in Sun Solaris 8, 9, and 10 before 20070925 allows local users to cause a denial of service (panic) via… Affected: 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-4732 | – | Sep 6 | Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-4495 | – | Aug 23 | Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service (system panic) via an… Affected: 8.0; 9.0; 10.0 |
| CVE-2007-4492 | – | Aug 23 | Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service (system… Affected: 8.0; 9.0; 10.0 |
| CVE-2007-4126 | – | Aug 1 | Unspecified vulnerability in the dynamic tracing framework (DTrace) on Sun Solaris 10 before 20070730 allows local users with PRIV_DTRACE_USER privileges to cause a denial of… Affected: 10.0; 10.0 |
| CVE-2007-4070 | – | Jul 30 | Unspecified vulnerability in Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-3723 | – | Jul 12 | The process scheduler in the Sun Solaris kernel does not make use of the process statistics kept by the kernel and performs scheduling based upon CPU billing gathered from… Affected: All versions, or not specified |
| CVE-2007-3469 | – | Jun 28 | Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service (resource exhaustion and service hang) via… Affected: 10.0; 10.0 |
| CVE-2007-3470 | – | Jun 28 | Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service (kernel… Affected: 10.0; 10.0 |
| CVE-2007-3471 | – | Jun 28 | Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via unspecified vectors Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-3458 | – | Jun 27 | The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Name Service Caching Daemon (nscd) crash) via unspecified vectors Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2007-3283 | – | Jun 19 | GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which… Affected: 8.0; 8.0; 9.0; 9.0 |
| CVE-2007-3248 | – | Jun 18 | Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote attackers to cause a denial of service… Affected: 10.0; 10.0 |
| CVE-2007-3223 | – | Jun 14 | Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service (system crash) via certain XDR data in NFS… Affected: 10.0 |
| CVE-2007-3093 | – | Jun 6 | Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary… Affected: 8.0; 9.0; 10.0 |
| CVE-2007-3094 | – | Jun 6 | Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to… Affected: 8.0; 9.0; 10.0 |
| CVE-2007-3069 | – | Jun 6 | xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the… Affected: 10.0; 10.0 |
| CVE-2007-2990 | – | Jun 1 | Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) via unspecified manipulations of the… Affected: 10.0; 10.0 |
| CVE-2007-2989 | – | Jun 1 | The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service (in.iked daemon… Affected: 9.0; 9.0 |
| CVE-2007-2882 | – | May 30 | Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remote attackers to cause a denial of… Affected: 8.0; 9.0; 10.0 |
| CVE-2007-2529 | – | May 9 | Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) and possibly gain privileges… Affected: 10.0 |
| CVE-2007-2465 | – | May 2 | Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to… Affected: 9.0 |
| CVE-2007-1681 | – | Apr 19 | Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash),… Affected: 10.0; 10.0 |
| CVE-2006-7140 | – | Mar 7 | The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which… Affected: 10.0 |