Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Total 1711 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1067 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.
CVE-2002-1980 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors.
CVE-1999-1426 1 Sun 1 Solstice Adminsuite 2025-04-03 6.2 MEDIUM N/A
Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.
CVE-1999-0410 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
CVE-2003-1521 1 Sun 1 Java Plug-in 2025-04-03 6.4 MEDIUM N/A
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.
CVE-1999-1402 2 Freebsd, Sun 3 Freebsd, Solaris, Sunos 2025-04-03 2.1 LOW N/A
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
CVE-1999-0254 1 Sun 1 Solaris 2025-04-03 10.0 HIGH N/A
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
CVE-1999-0851 3 Ibm, Sco, Sun 4 Aix, Openserver, Unixware and 1 more 2025-04-03 2.1 LOW N/A
Denial of service in BIND named via naptr.
CVE-1999-1026 1 Sun 1 Solaris 2025-04-03 7.2 HIGH N/A
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
CVE-1999-1527 1 Sun 2 Forte, Netbeans Developer 2025-04-03 7.5 HIGH N/A
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
CVE-1999-0952 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
CVE-1999-0277 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
The WorkMan program can be used to overwrite any file to get root access.
CVE-1999-0859 1 Sun 2 Solaris, Sunos 2025-04-03 2.1 LOW N/A
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
CVE-2006-0647 1 Sun 1 Java System Directory Server 2025-04-03 5.0 MEDIUM N/A
LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a denial of service (memory allocation error) via an LDAP packet with a crafted subtree search request, as demonstrated using the ProtoVer LDAP test suite.
CVE-2000-0069 1 Sun 1 Solstice Backup 2025-04-03 2.1 LOW N/A
The recover program in Solstice Backup allows local users to restore sensitive files.
CVE-2001-0059 1 Sun 1 Sunos 2025-04-03 6.2 MEDIUM N/A
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
CVE-2004-0817 9 Conectiva, Enlightenment, Imagemagick and 6 more 16 Linux, Imlib, Imlib2 and 13 more 2025-04-03 7.5 HIGH N/A
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
CVE-2001-0470 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name.
CVE-2002-2005 1 Sun 1 Java Web Start 2025-04-03 7.5 HIGH N/A
Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.
CVE-1999-0298 2 Slackware, Sun 2 Slackware Linux, Sunos 2025-04-03 7.5 HIGH N/A
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.