Product:

Sunos

(Sun)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 566
Date Id Summary Products Score Patch Annotated
1990-12-20 CVE-1999-1197 TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges. Sunos N/A
1997-06-24 CVE-1999-1192 Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. Sunos N/A
1997-05-19 CVE-1999-1191 Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. Solaris, Sunos N/A
1997-05-13 CVE-1999-1158 Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd. Sunos N/A
1992-05-27 CVE-1999-1142 SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user. Sunos N/A
1993-10-01 CVE-1999-1137 The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone. Solaris, Sunos N/A
1991-05-20 CVE-1999-1123 The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall. Sunos N/A
1989-07-26 CVE-1999-1122 Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges. Sunos N/A
1999-12-31 CVE-1999-1102 lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times. A_ux, Bsd, Irix, Sunos N/A
1995-05-10 CVE-1999-1080 rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf. Sunos N/A