Sun Sunos vulnerabilities

CVE-2004-0481 [LOW] CVE-2004-0481: The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other ver The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.

CVE-1999-1449 [LOW] CVE-1999-1449: SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.

CVE-2013-1530 [LOW] CVE-2013-1530: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via unk Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via unknown vectors related to Kernel.

CVE-2013-0412 [LOW] CVE-2013-0412: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integr Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax.

CVE-2011-0801 [LOW] CVE-2011-0801: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect confident Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to cp.

CVE-2011-2289 [LOW] CVE-2011-2289: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect integrity and availabili Unspecified vulnerability in Oracle Solaris 10 allows local users to affect integrity and availability via unknown vectors related to LiveUpgrade.

CVE-2013-5883 [LOW] CVE-2013-5883: Unspecified vulnerability in Oracle Solaris 8 allows local users to affect integrity and availabilit Unspecified vulnerability in Oracle Solaris 8 allows local users to affect integrity and availability via unknown vectors related to Kernel.

CVE-2007-0895 [LOW] CVE-2007-0895: Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 t Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to a ".." directory that is higher than expected, possibly up to

CVE-1999-0676 [MEDIUM] CVE-1999-0676: sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.

CVE-1999-1102 [LOW] CVE-1999-1102: lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

CVE-2005-3071 [LOW] CVE-2005-3071: Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, all Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to cause a denial of service ("soft hang") via certain write operations to UFS.

CVE-2005-2032 [LOW] CVE-2005-2032: Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrar Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files.

CVE-2006-1092 [LOW] CVE-2006-1092: Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows local users to cause a denial of service (system hang or panic) via unknown attack vectors that cause cause the kmem_oversize arena to allocate a large amount of system memory that does not get freed.

CVE-2004-1355 [LOW] CVE-2004-1355: Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a deni Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

CVE-2005-1518 [LOW] CVE-2005-1518: Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, an Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when "accessing" /xfn/_x500.

CVE-2003-1061 [LOW] CVE-2003-1061: Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel pani Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines.

CVE-2012-0569 [LOW] CVE-2012-0569: Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and int Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Install/smpatch.

CVE-2015-0429 [LOW] CVE-2015-0429: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility.

CVE-1999-0143 [MEDIUM] CVE-1999-0143: Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.

CVE-1999-1137 [LOW] CVE-1999-1137: The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any loc The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone.