Sun

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-1583 1Sun 1Sunos Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this mi...Show more lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.Show less
CVE-2001-1582 1Sun 2Solaris Sunos Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
CVE-2001-1555 1Sun 2Solaris Sunos Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY.
CVE-2001-1503 1Sun 2Solaris Sunos Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.
CVE-2001-1480 2Apple Sun 4Jdk JreMac Os Runtime For Java+1 more Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
CVE-2001-1479 1Sun 1Management+center Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT.
CVE-2001-0797 5Hp IbmSco+2 more 6Aix Hp UxIrix+3 more Apr 16, 2026 Dec 12, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
CVE-2001-0922 1Sun 1Netdynamics Apr 16, 2026 Nov 26, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field,...Show more ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.Show less
CVE-2001-0652 1Sun 1Sunos Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
CVE-2001-0779 1Sun 2Solaris Sunos Apr 16, 2026 Oct 18, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.
CVE-2001-1414 1Sun 2Solaris Sunos Apr 16, 2026 Oct 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the...Show more The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.Show less
CVE-2001-0701 1Sun 1Sunvts Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.
CVE-2001-0699 1Sun 1Sunos Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.
CVE-2001-0686 1Sun 1Solaris Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable.
CVE-2001-1066 1Sun 1Solaris Apr 16, 2026 Aug 31, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.
CVE-2001-1008 1Sun 2Java Plug In Jre Apr 16, 2026 Aug 31, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
CVE-2001-0634 1Sun 1Chilisoft Apr 16, 2026 Aug 22, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.
CVE-2001-0633 1Sun 1Chilisoft Apr 16, 2026 Aug 22, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'.
CVE-2001-0632 1Sun 1Chilisoft Apr 16, 2026 Aug 22, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges.
CVE-2001-0606 2Hp Sun 2Iplanet Web Server Virtualvault Apr 16, 2026 Aug 22, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.

Previous 1...676869...81 Next