Sun Sunos vulnerabilities
537 known vulnerabilities affecting sun/sunos.
Total CVEs
537
CISA KEV
0
Public exploits
105
Exploited in wild
6
Severity breakdown
CRITICAL51HIGH177MEDIUM218LOW91
Vulnerabilities
Page 22 of 27
CVE-2011-2293P4MEDIUMCVSS 4.9v5.112011-07-21
CVE-2011-2293 [MEDIUM] CVE-2011-2293: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Zones.
nvd
CVE-2011-2290P4MEDIUMCVSS 4.9v5.10v5.112011-07-21
CVE-2011-2290 [MEDIUM] CVE-2011-2290: Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows local users to affect availabi
Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/sockfs.
nvd
CVE-2011-2259P4MEDIUMCVSS 4.9v5.8v5.9+2 more2011-07-20
CVE-2011-2259 [MEDIUM] CVE-2011-2259: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect av
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to UFS.
nvd
CVE-2013-3797P4MEDIUMCVSS 4.7v5.112013-07-17
CVE-2013-3797 [MEDIUM] CVE-2013-3797: Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown
Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS.
nvd
CVE-2012-1765P4MEDIUMCVSS 4.7v5.102012-07-17
CVE-2012-1765 [MEDIUM] CVE-2012-1765: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknow
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone.
nvd
CVE-2011-2295P4MEDIUMCVSS 4.7v5.8v5.9+2 more2011-07-21
CVE-2011-2295 [MEDIUM] CVE-2011-2295: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect av
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to Driver/USB.
nvd
CVE-2013-1494P4MEDIUMCVSS 4.7v5.102013-04-17
CVE-2013-1494 [MEDIUM] CVE-2013-1494: Unspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows local u
Unspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows local users to affect availability via unknown vectors related to Kernel.
nvd
CVE-2007-6216P4MEDIUMCVSS 4.7v5.102007-12-04
CVE-2007-6216 [MEDIUM] CWE-362 CVE-2007-6216: Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Sola
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.
nvd
CVE-2006-6275P4MEDIUMCVSS 4.7v5.82006-12-04
CVE-2006-6275 [MEDIUM] CWE-362 CVE-2006-6275: Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of ser
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors, possibly related to the exitlwps function and SIGKILL and /proc PCAGENT signals.
nvd
CVE-2013-0407P4MEDIUMCVSS 4.6v5.10v5.112013-01-17
CVE-2013-0407 [MEDIUM] CVE-2013-0407: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/DTrace Framework.
nvd
CVE-2012-3211P4MEDIUMCVSS 4.6v5.10v5.112012-10-17
CVE-2012-3211 [MEDIUM] CVE-2012-3211: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/System Call.
nvd
CVE-2004-1394P4MEDIUMCVSS 4.6v5.82004-12-31
CVE-2004-1394 [MEDIUM] CVE-2004-1394: The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
nvd
CVE-2010-4446P4MEDIUMCVSS 4.6v5.112011-01-19
CVE-2010-4446 [MEDIUM] CVE-2010-4446: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand.
nvd
CVE-2010-4459P4MEDIUMCVSS 4.6v5.112011-01-19
CVE-2010-4459 [MEDIUM] CVE-2010-4459: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs.
nvd
CVE-2010-4443P4MEDIUMCVSS 4.4v5.10v5.112011-01-19
CVE-2010-4443 [MEDIUM] CVE-2010-4443: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availabil
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS.
nvd
CVE-2006-5012P4MEDIUMCVSS 6.6v5.8v5.9+1 more2006-09-27
CVE-2006-5012 [MEDIUM] CVE-2006-5012: Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a
Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being logged via unspecified vectors.
nvd
CVE-2010-4415P4MEDIUMCVSS 4.1v5.8v5.9+1 more2011-01-19
CVE-2010-4415 [MEDIUM] CVE-2010-4415: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentialit
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libc.
nvd
CVE-2012-4288P4LOWCVSS 3.3v5.112012-08-16
CVE-2012-4288 [LOW] CWE-189 CVE-2012-4288: Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissec
Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.
nvd
CVE-1999-1388P4MEDIUMCVSS 6.2v4.11994-05-13
CVE-1999-1388 [MEDIUM] CVE-1999-1388: passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
nvd
CVE-2003-1058P4LOWCVSS 3.7v5.7v5.82003-12-03
CVE-2003-1058 [LOW] CVE-2003-1058: The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, al
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
nvd