Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Sunos
(Sun)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 566 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
1999-12-31 | CVE-1999-1584 | Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586. | Openwindows, Sunos | N/A | ||
1995-08-23 | CVE-1999-1580 | SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option. | Sendmail, Sunos | N/A | ||
1993-02-03 | CVE-1999-1507 | Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash. | Sunos | N/A | ||
1990-01-29 | CVE-1999-1506 | Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin. | Sunos | N/A | ||
1991-10-22 | CVE-1999-1468 | rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. | Unicos, Next, Irix, Sunos | N/A | ||
1989-10-26 | CVE-1999-1467 | Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user. | Sunos | N/A | ||
1997-05-19 | CVE-1999-1449 | SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device. | Sunos | N/A | ||
1991-02-22 | CVE-1999-1438 | Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments. | Sunos | N/A | ||
1998-07-16 | CVE-1999-1432 | Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges. | Solaris, Sunos | N/A | ||
1997-06-26 | CVE-1999-1423 | ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i. | Solaris, Sunos | N/A |