Filtered by vendor Sun Subscriptions
Total 1712 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0015 4 Hp, Microsoft, Netbsd and 1 more 5 Hp-ux, Windows 95, Windows Nt and 2 more 2025-04-03 N/A
Teardrop IP denial of service.
CVE-1999-0302 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
CVE-1999-0301 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Buffer overflow in SunOS/Solaris ps command.
CVE-2005-1753 1 Sun 1 Javamail 2025-04-03 N/A
ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products.
CVE-2005-1754 2 Apache Tomcat, Sun 2 Apache Tomcat, Javamail 2025-04-03 N/A
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products.
CVE-1999-0009 11 Bsdi, Caldera, Data General and 8 more 13 Bsd Os, Openlinux, Dg Ux and 10 more 2025-04-03 N/A
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-2005-3781 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries."
CVE-2006-4353 1 Sun 1 Java System Content Delivery Server 2025-04-03 N/A
Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from arbitrary files via unspecified vectors.
CVE-1999-0209 1 Sun 1 Sunos 2025-04-03 N/A
The SunView (SunTools) selection_svc facility allows remote users to read files.
CVE-1999-0408 1 Sun 1 Cobalt Raq 2025-04-03 N/A
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
CVE-1999-0189 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
CVE-1999-0300 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
CVE-1999-0188 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
The passwd command in Solaris can be subjected to a denial of service.
CVE-1999-1449 1 Sun 1 Sunos 2025-04-03 N/A
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
CVE-1999-1467 1 Sun 1 Sunos 2025-04-03 N/A
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
CVE-1999-1468 4 Cray, Next, Sgi and 1 more 4 Unicos, Next, Irix and 1 more 2025-04-03 N/A
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
CVE-1999-1527 1 Sun 2 Forte, Netbeans Developer 2025-04-03 N/A
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
CVE-1999-1586 1 Sun 1 Sunos 2025-04-03 N/A
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
CVE-2000-0069 1 Sun 1 Solstice Backup 2025-04-03 N/A
The recover program in Solstice Backup allows local users to restore sensitive files.
CVE-1999-0298 2 Slackware, Sun 2 Slackware Linux, Sunos 2025-04-03 N/A
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.