Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Total 1704 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0797 1 Sun 1 Sunos 2025-04-03 2.6 LOW N/A
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries.
CVE-1999-0164 1 Sun 1 Sunos 2025-04-03 6.2 MEDIUM N/A
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
CVE-1999-0833 2 Isc, Sun 3 Bind, Solaris, Sunos 2025-04-03 7.5 HIGH N/A
Buffer overflow in BIND 8.2 via NXT records.
CVE-1999-1585 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
CVE-2005-0836 1 Sun 1 J2se 2025-04-03 10.0 HIGH N/A
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
CVE-2005-0447 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.
CVE-2000-0234 1 Sun 2 Cobalt Raq 2, Cobalt Raq 3i 2025-04-03 5.0 MEDIUM N/A
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
CVE-2002-2374 1 Sun 1 Patchpro 2025-04-03 10.0 HIGH N/A
Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."
CVE-1999-0132 2 Hp, Sun 3 Hp-ux, Solaris, Sunos 2025-04-03 2.1 LOW N/A
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
CVE-1999-0065 1 Sun 2 Solaris, Sunos 2025-04-03 7.5 HIGH N/A
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
CVE-2003-1062 1 Sun 2 Solaris, Sunos 2025-04-03 4.6 MEDIUM N/A
Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory.
CVE-2003-1065 1 Sun 1 Sunos 2025-04-03 2.1 LOW N/A
Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a denial of service (automountd crash).
CVE-2006-2930 1 Sun 2 Grid Engine, N1 Grid Engine 2025-04-03 4.6 MEDIUM N/A
Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain access, even if access is denied.
CVE-1999-1014 1 Sun 2 Solaris, Sunos 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
CVE-2004-2627 1 Sun 1 J2me 2025-04-03 10.0 HIGH N/A
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
CVE-1999-0773 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in Solaris lpset program allows local users to gain root access.
CVE-2004-0742 1 Sun 1 Java System Calendar Server 2025-04-03 10.0 HIGH N/A
Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.
CVE-1999-0033 5 Ibm, Ncr, Sco and 2 more 7 Aix, Mp-ras, Open Desktop and 4 more 2025-04-03 7.2 HIGH N/A
Command execution in Sun systems via buffer overflow in the at program.
CVE-2006-3728 1 Sun 2 Solaris, Sunos 2025-04-03 6.8 MEDIUM N/A
Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic, application failure, or "data corruption."
CVE-2005-1105 1 Sun 1 Javamail 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.