SO
Product
Solaris
450
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0302 | – | Sep 1 | SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server Affected: 2.6 |
| CVE-1999-0065 | – | Aug 31 | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands Affected: 2.4; 2.5; 2.5.1; 2.6 |
| CVE-1999-0339 | – | Aug 1 | Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access Affected: 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-1432 | – | Jul 16 | Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical… Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0213 | – | Jul 15 | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind Affected: 2.6 |
| CVE-1999-0054 | – | Jun 10 | Sun's ftpd daemon can be subjected to a denial of service Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0008 | – | Jun 8 | Buffer overflow in NIS+, in Sun's rpc.nisd program Affected: 2.6 |
| CVE-1999-0303 | – | May 21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames Affected: 1.1.3; 1.1.4; 2.4; 2.5 |
| CVE-1999-0055 | – | May 14 | Buffer overflows in Sun libnsl allow root access Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-1027 | – | May 7 | Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program Affected: 2.6 |
| CVE-1999-0190 | – | Apr 8 | Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access Affected: 2.4; 2.5; 2.5.1; 2.6 |
| CVE-1999-0009 | – | Apr 8 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases Affected: 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0003 | – | Apr 1 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd) Affected: 2.6 |
| CVE-1999-1118 | – | Mar 11 | ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters Affected: 2.6 |
| CVE-1999-0502 | – | Mar 1 | A Unix account has a default, null, blank, or missing password Affected: 2.6 |
| CVE-1999-0795 | – | Mar 1 | The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches Affected: All versions, or not specified |
| CVE-1999-0320 | – | Mar 1 | SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0296 | – | Feb 1 | Solaris volrmmount program allows attackers to read any file Affected: 2.6 |
| CVE-1999-0125 | – | Jan 25 | Buffer overflow in SGI IRIX mailx program Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0513 | – | Jan 5 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0018 | – | Dec 5 | Buffer overflow in statd allows root privileges Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0210 | – | Nov 26 | Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0097 | – | Oct 29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0300 | – | Oct 1 | nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0295 | – | Oct 1 | Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges Affected: 2.4; 2.5; 2.5.1; 2.5.1 |
| CVE-1999-0185 | – | Oct 1 | In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-1225 | – | Aug 24 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file,… Affected: All versions, or not specified |
| CVE-1999-0024 | – | Aug 13 | DNS cache poisoning via BIND, by predictable query IDs Affected: 2.4; 2.5; 2.5.1; 2.6 |
| CVE-1999-0301 | – | Aug 1 | Buffer overflow in SunOS/Solaris ps command Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-1419 | – | Jul 30 | Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges Affected: 2.4 |
| CVE-1999-1423 | – | Jun 26 | ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0189 | – | Jun 4 | Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111 Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-1191 | – | May 19 | Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-1402 | – | May 17 | The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to… Affected: 2.5; 2.5.1; 2.5.1; 2.6 |
| CVE-1999-0040 | – | May 1 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0315 | – | Apr 1 | Buffer overflow in Solaris fdformat command gives root access to local users Affected: 2.4; 2.5; 2.5.1; 2.6 |
| CVE-1999-0318 | – | Mar 1 | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable Affected: 2.6 |
| CVE-1999-0165 | – | Mar 1 | NFS cache poisoning Affected: 2.4 |
| CVE-1999-0109 | – | Feb 10 | Buffer overflow in ffbconfig in Solaris 2.5.1 Affected: 2.5; 2.5.1; 2.5.1 |
| CVE-1999-0369 | – | Feb 1 | The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access Affected: 1.1.3; 1.1.4; 2.4; 2.5 |
| CVE-1999-0051 | – | Jan 6 | Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-1026 | – | Dec 20 | aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0129 | – | Dec 3 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0132 | – | Aug 15 | Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access Affected: 2.4 |
| CVE-1999-1413 | – | Aug 3 | Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or… Affected: 2.4 |
| CVE-1999-0135 | – | Jul 25 | admintool in Solaris allows a local user to write to arbitrary files and gain root access Affected: 2.5; 2.5.1; 2.5.1 |
| CVE-1999-0241 | – | Nov 1 | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g Affected: 2.5; 2.5.1; 7.0 |
| CVE-1999-0099 | – | Oct 19 | Buffer overflow in syslog utility allows local or remote attackers to gain root privileges Affected: 2.4 |
| CVE-1999-0334 | – | Dec 16 | In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access Affected: All versions, or not specified |
| CVE-1999-1137 | – | Oct 1 | The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor… Affected: All versions, or not specified |