Vulnerabilities
Vulnerable Software
Sun:  >> Sunos  >> 5.9  Security Vulnerabilities
Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).
CVSS Score
5.0
EPSS Score
0.008
Published
2004-02-16
Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.
CVSS Score
4.0
EPSS Score
0.001
Published
2003-12-31
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
CVSS Score
10.0
EPSS Score
0.556
Published
2001-12-31
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
CVSS Score
7.2
EPSS Score
0.001
Published
2001-10-30
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.
CVSS Score
4.6
EPSS Score
0.002
Published
2001-08-14
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
CVSS Score
6.4
EPSS Score
0.024
Published
2001-07-02
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
CVSS Score
7.2
EPSS Score
0.002
Published
2001-06-18
Vacation program allows command execution by remote users through a sendmail command.
CVSS Score
7.5
EPSS Score
0.029
Published
1998-11-16
Buffer overflow in Sun's ping program can give root access to local users.
CVSS Score
7.2
EPSS Score
0.001
Published
1998-09-09
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries.
CVSS Score
2.6
EPSS Score
0.005
Published
1998-06-29


Contact Us

Shodan ® - All rights reserved