Sun Sunos vulnerabilities

CVE-1999-0315 [HIGH] CVE-1999-0315: Buffer overflow in Solaris fdformat command gives root access to local users. Buffer overflow in Solaris fdformat command gives root access to local users.

CVE-1999-1158 [HIGH] CVE-1999-1158: Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_s Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.

CVE-1999-0691 [HIGH] CVE-1999-0691: Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

CVE-1999-0369 [HIGH] CVE-1999-0369: The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root acc The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.

CVE-1999-0948 [HIGH] CVE-1999-0948: Buffer overflow in uum program for Canna input system allows local users to gain root privileges. Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

CVE-1999-0949 [HIGH] CVE-1999-0949: Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

CVE-2008-1369 [CRITICAL] CWE-264 CVE-2008-1369: A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/defaul A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.

CVE-2007-3094 [CRITICAL] CVE-2007-3094: Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server.

CVE-1999-0040 [HIGH] CVE-1999-0040: Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

CVE-2000-0949 [HIGH] CVE-2000-0949: Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execut Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.

CVE-2003-1055 [HIGH] CVE-2003-1055: Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain r Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.

CVE-2001-0401 [HIGH] CVE-2001-0401: Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.

CVE-2004-0360 [HIGH] CVE-2004-0360: Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.

CVE-2000-0316 [HIGH] CVE-2000-0316: Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.

CVE-1999-0689 [HIGH] CVE-1999-0689: The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

CVE-1999-0841 [HIGH] CVE-1999-0841: Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-T Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.

CVE-1999-0023 [HIGH] CVE-1999-0023: Local user gains root privileges via buffer overflow in rdist, via lookup() function. Local user gains root privileges via buffer overflow in rdist, via lookup() function.

CVE-1999-0773 [HIGH] CVE-1999-0773: Buffer overflow in Solaris lpset program allows local users to gain root access. Buffer overflow in Solaris lpset program allows local users to gain root access.

CVE-1999-0038 [HIGH] CWE-120 CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root. Buffer overflow in xlock program allows local users to execute commands as root.

CVE-2000-0407 [HIGH] CVE-2000-0407: Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.