Sun

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2002-0430 1Sun 3Cobalt Raq 2 Cobalt Raq 3iCobalt Raq 4 Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 3.7 LOW· v2 MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to M...Show more MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.Show less
CVE-2002-0391 4Freebsd MicrosoftOpenbsd+1 more 7Freebsd OpenbsdSolaris+4 more Apr 16, 2026 Aug 12, 2002 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large num...Show more Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.Show less
CVE-2002-0436 1Sun 2Solaris Sunos Apr 16, 2026 Jul 26, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
CVE-2002-0678 7Caldera CompaqHp+4 more 9Aix DextopHp Ux+6 more Apr 16, 2026 Jul 23, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
CVE-2002-0677 7Caldera CompaqHp+4 more 9Aix DextopHp Ux+6 more Apr 16, 2026 Jul 23, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is...Show more CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.Show less
CVE-2002-0573 1Sun 2Solaris Sunos Apr 16, 2026 Jul 3, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog functi...Show more Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.Show less
CVE-2002-0572 3Freebsd OpenbsdSun 4Freebsd OpenbsdSolaris+1 more Apr 16, 2026 Jul 3, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standar...Show more FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.Show less
CVE-2002-0360 1Sun 1Solaris Answerbook2 Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.
CVE-2002-0348 1Sun 3Cobalt Raq 2 Cobalt Raq 3iCobalt Raq 4 Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
CVE-2002-0347 1Sun 3Cobalt Raq 2 Cobalt Raq 3iCobalt Raq 4 Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
CVE-2002-0346 1Sun 3Cobalt Raq 2 Cobalt Raq 3iCobalt Raq 4 Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
CVE-2002-0033 1Sun 2Solaris Sunos Apr 16, 2026 May 29, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
CVE-2002-0158 1Sun 2Solaris Sunos Apr 16, 2026 Apr 2, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
CVE-2002-0076 3Hp MicrosoftSun 5Java Jre Jdk JdkJre+2 more Apr 16, 2026 Mar 19, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earl...Show more Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.Show less
CVE-2002-0090 1Sun 1Solaris Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.
CVE-2002-0089 1Sun 2Solaris Sunos Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
CVE-2002-0088 1Sun 2Solaris Sunos Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
CVE-2002-0085 1Sun 2Solaris Sunos Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
CVE-2002-0084 1Sun 2Solaris Sunos Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
CVE-2002-0058 2Microsoft Sun 4Jdk JreSdk+1 more Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another serv...Show more Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.Show less

Previous 1...666768...81 Next