Sun Sunos vulnerabilities

CVE-2008-2708 [MEDIUM] CVE-2008-2708: Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv_93, allows local users to cause a denial of service (panic) via unspecified vectors, probably related to core files.

CVE-2011-0813 [MEDIUM] CVE-2011-0813: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect av Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2012-0098.

CVE-2012-3212 [MEDIUM] CVE-2012-3212: Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC T4 servers, allows Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC T4 servers, allows local users to affect availability via unknown vectors related to Kernel.

CVE-1999-0167 [MEDIUM] CVE-1999-0167: In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system. In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.

CVE-2004-2306 [MEDIUM] CVE-2004-2306: Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has be Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.

CVE-1999-0370 [MEDIUM] CVE-1999-0370: In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary fi In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.

CVE-1999-0132 [LOW] CVE-1999-0132: Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root acce Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.

CVE-2010-4442 [MEDIUM] CVE-2010-4442: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availabil Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel.

CVE-2010-4440 [MEDIUM] CVE-2010-4440: Unspecified vulnerability in Oracle 10 and 11 Express allows local users to affect availability via Unspecified vulnerability in Oracle 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel.

CVE-2011-2313 [MEDIUM] CVE-2011-2313: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different vulnerability than CVE-2011-2311.

CVE-2010-4458 [MEDIUM] CVE-2010-4458: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, re Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS.

CVE-2012-0099 [LOW] CVE-2012-0099: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to sshd.

CVE-2012-1698 [LOW] CVE-2012-1698: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confi Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD.

CVE-2008-0269 [MEDIUM] CVE-2008-0269: Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors.

CVE-2007-5921 [MEDIUM] CVE-2007-5921: Unspecified vulnerability in the ioctl interface in the Solaris Volume Manager (SVM) in Sun Solaris Unspecified vulnerability in the ioctl interface in the Solaris Volume Manager (SVM) in Sun Solaris 9 and 10 allows local users to cause a denial of service (panic) via unspecified vectors, a different vulnerability than CVE-2004-1346.

CVE-2007-2465 [MEDIUM] CVE-2007-2465: Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, wr Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service (panic) via unknown vectors, possibly related to the audit_savepath function.

CVE-2001-1503 [LOW] CVE-2001-1503: The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.

CVE-2002-1323 [MEDIUM] CVE-2002-1323: Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

CVE-2001-1555 [MEDIUM] CVE-2001-1555: pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of termi pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY.

CVE-1999-1025 [MEDIUM] CVE-1999-1025: CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's co CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.