Browse CVEs

HIGH 7.2 CVE-2002-1980 Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vector… Solaris Patch available Fix from $1,9502002-12-31 HIGH 7.2 CVE-2002-2197 Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering… Solaris Mitigation only Fix from $1,9502002-12-31 HIGH 10.0 CVE-2002-1361EPSS 12% overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a… Cobalt Raq 4 Patch available Fix from $1,9502002-12-23 HIGH 7.2 CVE-2002-1296 Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_c… Solaris Patch available Fix from $1,9502002-12-23 MEDIUM 5.0 CVE-2002-1588 Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a… Openwindows Patch available Fix from $1,6002002-11-29 MEDIUM 5.0 CVE-2002-1585 Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets t… Solaris Patch available Fix from $1,6002002-11-08 HIGH 7.2 CVE-2002-1590 The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Sola… Solaris Patch available Fix from $1,9502002-10-29 MEDIUM 5.0 CVE-2002-1228 Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon. Solaris Mitigation only Fix from $1,6002002-10-28 HIGH 10.0 CVE-2002-1034 none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument. I Runbook No fix yet Fix from $1,9502002-10-04 HIGH 7.5 CVE-2002-0994 SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, whic… Sun Pci Ii Driver No fix yet Fix from $1,9502002-10-04 MEDIUM 5.0 CVE-2002-1033 Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot … I Runbook No fix yet Fix from $1,6002002-10-04 HIGH 10.0 CVE-2002-0796 Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges. Solaris Patch available Fix from $1,9502002-08-12 HIGH 10.0 CVE-2002-0797 Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges. Solaris Patch available Fix from $1,9502002-08-12 HIGH 10.0 CVE-2002-0436EPSS 12% sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email… Solaris Mitigation only Fix from $1,9502002-07-26 HIGH 7.5 CVE-2002-0573EPSS 9% Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format … Solaris Patch available Fix from $1,9502002-07-03 HIGH 7.5 CVE-2002-0346EPSS 6% Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL … Cobalt Raq 2 Patch available Fix from $1,9502002-06-25 HIGH 7.5 CVE-2002-0348EPSS 8% service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument. Cobalt Raq 2 Patch available Fix from $1,9502002-06-25 HIGH 7.5 CVE-2002-0360 Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbi… Solaris Answerbook2 Mitigation only Fix from $1,9502002-06-25 MEDIUM 5.0 CVE-2002-0347EPSS 6% Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, … Cobalt Raq 2 Patch available Fix from $1,6002002-06-25 HIGH 10.0 CVE-2002-0033EPSS 23% Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long di… Solaris Patch available Fix from $1,9502002-05-29 HIGH 7.2 CVE-2002-0158 Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument. Solaris Patch available Fix from $1,9502002-04-02 HIGH 7.2 CVE-2002-0084EPSS 21% Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argume… Solaris Patch available Fix from $1,9502002-03-15 HIGH 7.2 CVE-2002-0088 Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path. Solaris Patch available Fix from $1,9502002-03-15 HIGH 7.2 CVE-2002-0089 Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option… Solaris Patch available Fix from $1,9502002-03-15 HIGH 7.2 CVE-2002-0090 Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option. Solaris Patch available Fix from $1,9502002-03-15 MEDIUM 5.0 CVE-2002-0085 cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request. Solaris Patch available Fix from $1,6002002-03-15 HIGH 10.0 CVE-2001-1583EPSS 83% lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that… Sunos after 5.9 Fix from $1,9502001-12-31 HIGH 7.2 CVE-2001-1582 Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS … Solaris Patch available Fix from $1,9502001-12-31 HIGH 7.5 CVE-2001-0922 ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by rea… Netdynamics Patch available Fix from $1,9502001-11-26 HIGH 7.2 CVE-2001-0652 Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH … Sunos after 5.9 Fix from $1,9502001-10-30