cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits.
Max CVSS
3.6
EPSS Score
0.04%
Published
2005-12-31
Updated
2018-10-30
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.
Max CVSS
7.2
EPSS Score
0.04%
Published
2004-12-31
Updated
2018-10-30
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
Max CVSS
7.2
EPSS Score
0.06%
Published
2004-12-31
Updated
2018-10-30
Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (system hang).
Max CVSS
5.0
EPSS Score
0.23%
Published
2004-12-31
Updated
2018-10-30
Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user.
Max CVSS
4.6
EPSS Score
0.04%
Published
2004-03-04
Updated
2018-10-30
Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068.
Max CVSS
7.2
EPSS Score
0.22%
Published
2003-12-31
Updated
2018-10-30
Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
Max CVSS
5.0
EPSS Score
10.71%
Published
2003-02-18
Updated
2018-10-30
The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.
Max CVSS
7.5
EPSS Score
1.74%
Published
2003-02-28
Updated
2018-10-30
Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.
Max CVSS
5.0
EPSS Score
10.71%
Published
2003-01-27
Updated
2018-10-30
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
Max CVSS
1.2
EPSS Score
0.04%
Published
2003-12-31
Updated
2018-10-30
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
Max CVSS
2.1
EPSS Score
0.04%
Published
2003-01-03
Updated
2018-10-30
Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).
Max CVSS
5.0
EPSS Score
7.91%
Published
2003-04-28
Updated
2018-10-30
The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop).
Max CVSS
5.0
EPSS Score
3.53%
Published
2003-06-03
Updated
2018-10-30
Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-06-06
Updated
2018-10-30
Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.
Max CVSS
7.2
EPSS Score
0.08%
Published
2003-06-19
Updated
2018-10-30
Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.
Max CVSS
5.0
EPSS Score
2.00%
Published
2003-12-31
Updated
2018-10-30
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
Max CVSS
7.5
EPSS Score
1.62%
Published
2003-08-20
Updated
2018-10-30
Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines.
Max CVSS
1.2
EPSS Score
0.04%
Published
2003-10-14
Updated
2018-10-30
Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.
Max CVSS
7.2
EPSS Score
0.18%
Published
2003-11-20
Updated
2018-10-30
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
Max CVSS
3.7
EPSS Score
0.06%
Published
2003-12-03
Updated
2018-10-30
Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-12-08
Updated
2018-10-30
The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
Max CVSS
7.2
EPSS Score
0.06%
Published
2003-12-11
Updated
2018-10-30
Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.
Max CVSS
7.2
EPSS Score
0.05%
Published
2004-01-05
Updated
2018-10-30

CVE-2003-0694

Public exploit
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Max CVSS
10.0
EPSS Score
5.70%
Published
2003-10-06
Updated
2018-10-30
Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or an attack by local users.
Max CVSS
1.2
EPSS Score
0.04%
Published
2003-08-27
Updated
2018-10-30
126 vulnerabilities found
1 2 3 4 5 6
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!