Sun Sunos vulnerabilities
537 known vulnerabilities affecting sun/sunos.
Total CVEs
537
CISA KEV
0
Public exploits
105
Exploited in wild
6
Severity breakdown
CRITICAL51HIGH177MEDIUM218LOW91
Vulnerabilities
Page 18 of 27
CVE-2013-0413P4MEDIUMCVSS 4.4v5.10v5.112013-04-17
CVE-2013-0413 [MEDIUM] CVE-2013-0413: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiali
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Remote Execution Service.
nvd
CVE-2012-4296P4LOWCVSS 3.3v5.112012-08-16
CVE-2012-4296 [LOW] CWE-399 CVE-2012-4296: Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1
Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.
nvd
CVE-1999-1468P4MEDIUMCVSS 6.2v4.0.3v4.0.3c+3 more1991-10-22
CVE-1999-1468 [MEDIUM] CVE-1999-1468: rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
nvd
CVE-2004-1393P4MEDIUMCVSS 5.0v5.7v5.82004-12-31
CVE-2004-1393 [MEDIUM] CVE-2004-1393: Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local
Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (system hang).
nvd
CVE-2012-3209P4MEDIUMCVSS 5.6v5.10v5.112012-10-17
CVE-2012-3209 [MEDIUM] CVE-2012-3209: Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC, allows local users
Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC, allows local users to affect integrity and availability via unknown vectors related to Logical Domain (LDOM).
nvd
CVE-2011-3515P4MEDIUMCVSS 5.6v5.10v5.112011-10-18
CVE-2011-3515 [MEDIUM] CVE-2011-3515: Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integ
Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integrity and availability via unknown vectors related to Process File System (procfs).
nvd
CVE-2005-0426P4MEDIUMCVSS 5.0v5.82005-05-02
CVE-2005-0426 [MEDIUM] CVE-2005-0426: Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic
Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dereference.
nvd
CVE-2003-1060P4MEDIUMCVSS 5.0v5.7v5.82003-10-27
CVE-2003-1060 [MEDIUM] CVE-2003-1060: The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS pan
The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference.
nvd
CVE-2014-4275P4MEDIUMCVSS 4.9v5.112014-10-15
CVE-2014-4275 [MEDIUM] CVE-2014-4275: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vec
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module.
nvd
CVE-2014-6600P4MEDIUMCVSS 4.9v5.112015-01-21
CVE-2014-6600 [MEDIUM] CVE-2014-6600: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different vulnerability than CVE-2014-6570 and CVE-2015-0397.
nvd
CVE-2014-6570P4MEDIUMCVSS 4.9v5.112015-01-21
CVE-2014-6570 [MEDIUM] CVE-2014-6570: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different vulnerability than CVE-2014-6600 and CVE-2015-0397.
nvd
CVE-2001-0699P4HIGHCVSS 7.2v5.82001-09-20
CVE-2001-0699 [HIGH] CVE-2001-0699: Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a loca
Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.
nvd
CVE-1999-0188P4HIGHCVSS 7.2v5.3v5.4+2 more1998-12-17
CVE-1999-0188 [HIGH] CVE-1999-0188: The passwd command in Solaris can be subjected to a denial of service.
The passwd command in Solaris can be subjected to a denial of service.
nvd
CVE-2013-5821P4MEDIUMCVSS 4.6v5.8v5.9+1 more2014-01-15
CVE-2013-5821 [MEDIUM] CVE-2013-5821: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect confiden
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via vectors related to RPC.
nvd
CVE-2014-4280P4MEDIUMCVSS 4.6v5.112014-10-15
CVE-2014-4280 [MEDIUM] CVE-2014-4280: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284.
nvd
CVE-2011-2258P4MEDIUMCVSS 4.6v5.8v5.9+2 more2011-07-20
CVE-2011-2258 [MEDIUM] CVE-2011-2258: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect co
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rksh.
nvd
CVE-2014-0421P4MEDIUMCVSS 4.6v5.102014-04-16
CVE-2014-0421 [MEDIUM] CVE-2014-0421: Unspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows local
Unspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows local users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2005-1124P4MEDIUMCVSS 4.6v5.7v5.82005-05-02
CVE-2005-1124 [MEDIUM] CVE-2005-1124: Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows
Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain privileges by loading their own GSS-API.
nvd
CVE-2012-1684P4MEDIUMCVSS 4.3v5.8v5.9+2 more2012-05-03
CVE-2012-1684 [MEDIUM] CVE-2012-1684: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confid
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy.
nvd
CVE-2003-1079P4MEDIUMCVSS 5.0v5.5.1v5.7+1 more2003-02-18
CVE-2003-1079 [MEDIUM] CVE-2003-1079: Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86,
Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
nvd