Sun Sunos vulnerabilities

CVE-2013-0398 [MEDIUM] CVE-2013-0398: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confi Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd).

CVE-1999-0214 [CRITICAL] CVE-1999-0214: Denial of service by sending forged ICMP unreachable packets. Denial of service by sending forged ICMP unreachable packets.

CVE-1999-0298 [HIGH] CVE-1999-0298: ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remo ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.

CVE-2003-1063 [HIGH] CVE-2003-1063: The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2. The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.

CVE-2014-6521 [HIGH] CVE-2014-6521: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.

CVE-2015-0375 [MEDIUM] CVE-2015-0375: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confiden Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown vectors related to Network.

CVE-2014-6490 [MEDIUM] CVE-2014-6490: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability vi Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB server user component.

CVE-2014-4277 [MEDIUM] CVE-2014-4277: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283.

CVE-2012-3124 [MEDIUM] CVE-2012-3124: Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, r Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to Kernel/KSSL.

CVE-2008-1095 [MEDIUM] CWE-264 CVE-2008-1095: Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 a Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly.

CVE-2006-4319 [HIGH] CVE-2006-4319: Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to form Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.

CVE-2004-1767 [HIGH] CWE-264 CVE-2004-1767: The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary lo The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.

CVE-2005-0816 [HIGH] CVE-2005-0816: Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges. Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.

CVE-2013-3750 [HIGH] CVE-2013-3750: Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel/VM

CVE-2003-0091 [HIGH] CVE-2003-0091: Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local us Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.

CVE-2014-4282 [HIGH] CVE-2014-4282: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.

CVE-2014-6524 [HIGH] CVE-2014-6524: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.

CVE-2012-3204 [HIGH] CVE-2012-3204: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management.

CVE-2008-3450 [HIGH] CWE-264 CVE-2008-3450: Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service (panic) via unspecified vectors.

CVE-2014-6510 [HIGH] CVE-2014-6510: Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.