cve.bz

oracle solaris vulnerabilities, newest first, page 12

Filter
  1. –CVE-2008-4609EPSS 32%

    The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via mu…

  2. –CVE-2007-0882EPSS 98%

    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote a…

  3. –CVE-2004-1349EPSS 0.6%

    gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.

  4. –CVE-2004-0230EPSS 80%

    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in proto…

  5. –CVE-2002-1337EPSS 73%

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

  6. 9.8CVE-2001-0249EPSS 20%

    Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

  7. 4.0CVE-1999-0524EPSS 32%

    ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

  8. –CVE-1999-0046EPSS 52%

    Buffer overflow of rlogin program using TERM environmental variable.