Sun: >> Solaris >> 9.0 Security Vulnerabilities
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
CVSS Score
2.1
EPSS Score
0.001
Published
1999-12-31
rpc.admind in Solaris is not running in a secure mode.
CVSS Score
10.0
EPSS Score
0.005
Published
1999-01-01
Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
CVSS Score
7.2
EPSS Score
0.002
Published
1998-12-01
Vacation program allows command execution by remote users through a sendmail command.
CVSS Score
7.5
EPSS Score
0.029
Published
1998-11-16
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
CVSS Score
7.5
EPSS Score
0.008
Published
1998-03-01
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
CVSS Score
5.0
EPSS Score
0.005
Published
1997-08-24
The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone.
CVSS Score
2.1
EPSS Score
0.001
Published
1993-10-01
Page 20