CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

SUN » Sunos : Security Vulnerabilities (CVSS score between 5 and 5.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2014-6490 2014-10-15 2014-10-28
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB server user component.
2 CVE-2014-4277 2014-10-15 2014-10-16
5.0
None Remote Low Not required Partial None None
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283.
3 CVE-2013-3813 2013-07-17 2013-12-05
5.8
None Remote Medium Not required Partial Partial None
Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality and integrity via vectors related to Libraries/PAM-Unix.
4 CVE-2013-0411 2013-04-17 2013-12-05
5.9
None Local High Multiple systems Complete Complete Complete
Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via vectors related to RBAC Configuration.
5 CVE-2013-0408 2013-04-17 2013-12-05
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to CPU performance counters drivers.
6 CVE-2013-0398 2013-07-17 2013-12-05
5.0
None Remote Low Not required Partial None None
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd).
7 CVE-2012-3209 2012-10-16 2013-10-10
5.6
None Local Low Not required None Partial Complete
Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC, allows local users to affect integrity and availability via unknown vectors related to Logical Domain (LDOM).
8 CVE-2012-3129 2012-07-17 2013-10-10
5.1
None Remote High Not required Partial Partial Partial
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, integrity, and availability, related to Gnome PDF viewer.
9 CVE-2012-3127 2012-07-17 2013-10-10
5.4
None Remote High Not required None None Complete
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to SCTP.
10 CVE-2012-3124 2012-07-17 2013-10-10
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to Kernel/KSSL.
11 CVE-2012-3123 2012-07-17 2013-10-10
5.0
None Remote Low Not required Partial None None
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.
12 CVE-2012-3121 2012-07-17 2013-10-10
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote attackers to affect availability via unknown vectors related to in.tnamed and NameServer.
13 CVE-2012-1687 2012-07-17 2013-10-10
5.6
None Local Low Not required None Partial Complete
Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability, related to Logical Domains (LDOM).
14 CVE-2012-1683 2012-05-03 2013-10-10
5.9
None Local High Multiple systems Complete Complete Complete
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to gssd.
15 CVE-2012-0096 2012-01-18 2012-01-30
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network.
16 CVE-2011-3515 2011-10-18 2012-11-06
5.6
None Local Low Not required None Partial Complete
Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integrity and availability via unknown vectors related to Process File System (procfs).
17 CVE-2011-2298 2011-07-20 2011-10-04
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to KSSL.
18 CVE-2011-2294 2011-07-20 2011-10-04
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to SSH.
19 CVE-2011-2249 2011-07-20 2011-10-04
5.2
None Local Network Medium Single system None None Complete
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote authenticated users to affect availability, related to TCP/IP.
20 CVE-2011-0820 2011-04-20 2012-08-03
5.4
None Remote High Not required None None Complete
Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Kernel.
21 CVE-2010-4433 2011-01-19 2011-01-26
5.0
None Remote Low Not required Partial None None
Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component.
22 CVE-1999-1258 +Info 1991-01-15 2008-09-05
5.0
None Remote Low Not required Partial None None
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.
23 CVE-1999-0345 DoS 1997-01-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
24 CVE-1999-0217 1997-01-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
25 CVE-1999-0211 1994-02-14 2008-09-09
5.0
None Remote Low Not required Partial None None
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
26 CVE-1999-0209 1990-08-14 2008-09-09
5.0
None Remote Low Not required Partial None None
The SunView (SunTools) selection_svc facility allows remote users to read files.
27 CVE-1999-0128 DoS 1996-12-18 2008-09-09
5.0
None Remote Low Not required None None Partial
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
28 CVE-1999-0104 DoS 1997-12-16 2009-03-04
5.0
None Remote Low Not required None None Partial
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
29 CVE-1999-0019 1996-04-24 2008-09-09
5.0
None Remote Low Not required None Partial None
Delete or create a file via rpc.statd, due to invalid information.
30 CVE-1999-0016 DoS 1997-12-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Land IP denial of service.
31 CVE-1999-0015 DoS 1997-12-16 2009-03-04
5.0
None Remote Low Not required None None Partial
Teardrop IP denial of service.
Total number of vulnerabilities : 31   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.