CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. |
Buffer overflow in xlock program allows local users to execute commands as root. |
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. |
Sun's ftpd daemon can be subjected to a denial of service. |
Vacation program allows command execution by remote users through a sendmail command. |
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. |
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. |
Buffer overflow in ffbconfig in Solaris 2.5.1. |
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. |
Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access. |
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. |
Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. |
Solaris volrmmount program allows attackers to read any file. |
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. |
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. |
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access. |
Solaris ff.core allows local users to modify files. |
The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root. |
rpc.admind in Solaris is not running in a secure mode. |
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host. |