Vulnerability index

Browse CVEs

713 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Solaris HIGH 7.2
CVE-2001-0124

Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.

Patch available
Fix from $1,950 2001-03-12
Sunos MEDIUM 6.2
CVE-2001-0059

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.

Mitigation only
Fix from $1,600 2001-02-12
Cluster MEDIUM 5.0
CVE-2001-0077

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system…

Mitigation only
Fix from $1,600 2001-02-12
Hotjava Browser MEDIUM 5.0
CVE-2000-0958

HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.

Patch available
Fix from $1,600 2000-12-19
Solaris Answerbook2 HIGH 10.0
CVE-2000-0697EPSS 11%

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metachar…

Patch available
Fix from $1,950 2000-10-20
Solaris Answerbook2 HIGH 7.5
CVE-2000-0696EPSS 7%

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts,…

Patch available
Fix from $1,950 2000-10-20
Solaris HIGH 7.2
CVE-2000-0471

Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.

Patch available
Fix from $1,950 2000-06-14
Cobalt Raq 2 HIGH 7.5
CVE-2000-0431

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to …

Patch available
Fix from $1,950 2000-05-22
Solaris HIGH 7.2
CVE-2000-0407

Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.

Mitigation only
Fix from $1,950 2000-05-12
Solaris HIGH 7.2
CVE-2000-0316

Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.

Mitigation only
Fix from $1,950 2000-04-24
Solaris HIGH 7.2
CVE-2000-0317

Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.

Patch available
Fix from $1,950 2000-04-24
Solaris HIGH 7.2
CVE-2000-0337

Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.

Mitigation only
Fix from $1,950 2000-04-24
Cobalt Raq 2 MEDIUM 5.0
CVE-2000-0234EPSS 7%

The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.

Mitigation only
Fix from $1,600 2000-03-31
Staroffice HIGH 10.0
CVE-2000-0175

Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.

Mitigation only
Fix from $1,950 2000-03-09
Staroffice MEDIUM 5.0
CVE-2000-0174EPSS 6%

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Mitigation only
Fix from $1,600 2000-03-09
Solaris Isp Server HIGH 7.2
CVE-2000-0164

The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.

No fix yet
Fix from $1,950 2000-02-20
Cobalt Raq HIGH 7.2
CVE-2000-0117

The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possib…

Mitigation only
Fix from $1,950 2000-01-30
Solaris HIGH 7.2
CVE-2000-0055

Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.

Mitigation only
Fix from $1,950 2000-01-06
Openwindows HIGH 10.0
CVE-1999-1584

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Op…

Patch available
Fix from $1,950 1999-12-31
Solaris CRITICAL 9.8
CVE-1999-1588EPSS 10%

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beg…

No fix yet
Fix from $2,300 1999-12-31
Sunos HIGH 7.2
CVE-1999-1585

The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the…

Patch available
Fix from $1,950 1999-12-31
Sunos HIGH 7.2
CVE-1999-1586

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vul…

Patch available
Fix from $1,950 1999-12-31
Solaris HIGH 10.0
CVE-2000-0032

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

Mitigation only
Fix from $1,950 1999-12-22
Solaris MEDIUM 5.0
CVE-2000-0030

Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.

Mitigation only
Fix from $1,600 1999-12-22
Solaris HIGH 10.0
CVE-1999-0977EPSS 13%

Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.

Mitigation only
Fix from $1,950 1999-12-10
Solaris HIGH 10.0
CVE-1999-0974

Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.

Mitigation only
Fix from $1,950 1999-12-09
Solaris HIGH 10.0
CVE-1999-0973

Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.

Mitigation only
Fix from $1,950 1999-12-07
Web Based Enterprise Management HIGH 7.2
CVE-1999-0982

The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.

Mitigation only
Fix from $1,950 1999-12-05
Sunos HIGH 7.2
CVE-1999-0840

Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.

Mitigation only
Fix from $1,950 1999-11-30
Sunos HIGH 7.2
CVE-1999-0841

Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.

Mitigation only
Fix from $1,950 1999-11-30