Filtered by vendor Sun
Subscriptions
Total
1712 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2001-1066 | 1 Sun | 1 Solaris | 2025-04-03 | N/A |
ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack. | ||||
CVE-2001-1328 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code. | ||||
CVE-2001-0922 | 1 Sun | 1 Netdynamics | 2025-04-03 | N/A |
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in. | ||||
CVE-1999-0277 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
The WorkMan program can be used to overwrite any file to get root access. | ||||
CVE-2001-0701 | 1 Sun | 1 Sunvts | 2025-04-03 | N/A |
Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument. | ||||
CVE-2001-0699 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument. | ||||
CVE-2001-0686 | 1 Sun | 1 Solaris | 2025-04-03 | N/A |
Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable. | ||||
CVE-2001-0652 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable. | ||||
CVE-2001-0634 | 1 Sun | 1 Chilisoft | 2025-04-03 | N/A |
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service. | ||||
CVE-2001-0633 | 1 Sun | 1 Chilisoft | 2025-04-03 | N/A |
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'. | ||||
CVE-2001-0632 | 1 Sun | 1 Chilisoft | 2025-04-03 | N/A |
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges. | ||||
CVE-2001-0606 | 2 Hp, Sun | 2 Virtualvault, Iplanet Web Server | 2025-04-03 | N/A |
Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. | ||||
CVE-2001-0595 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program. | ||||
CVE-2001-0594 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument. | ||||
CVE-2001-0565 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option. | ||||
CVE-2001-0548 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable. | ||||
CVE-2001-0470 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name. | ||||
CVE-2006-4959 | 1 Sun | 1 Secure Global Desktop | 2025-04-03 | N/A |
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available. | ||||
CVE-2006-4773 | 1 Sun | 1 Storedge 6130 Arrays | 2025-04-03 | N/A |
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN. | ||||
CVE-2006-4303 | 1 Sun | 1 Solaris | 2025-04-03 | N/A |
Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service ("tight loop" and CPU consumption for listener applications) via unknown vectors related to TCP fusion (do_tcp_fusion). |