Vulnerabilities > SUN > Solaris > 2.5.1

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-2203 Unspecified vulnerability in SUN Solaris and Sunos
Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information.
local
low complexity
sun
4.9
2002-12-31 CVE-2002-1980 Local Buffer Overflow vulnerability in Sun Solaris Volume Manager
Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors.
local
low complexity
sun
7.2
2002-12-27 CVE-2002-1584 Privilege Escalation vulnerability in Sun Solaris RPC AUTH_DES
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
network
low complexity
sgi sun
critical
10.0
2002-12-11 CVE-2002-1317 Remote Buffer Overrun vulnerability in Multiple Vendor X Font Server
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
network
low complexity
xfree86-project sgi hp sun
7.5
2002-12-04 CVE-2002-1587 Denial of Service vulnerability in Sun Solaris Libthread Library
The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex.
local
low complexity
sun
2.1
2002-12-03 CVE-2002-1586 Denial Of Service vulnerability in Sun Solaris System Panic
Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
local
low complexity
sun
2.1
2002-10-28 CVE-2002-1228 Remote Denial of Service vulnerability in Solaris NFS lockd
Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.
network
low complexity
sun
5.0
2002-07-03 CVE-2002-0572 FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
local
low complexity
freebsd openbsd sun
7.2
2002-05-29 CVE-2002-0033 Heap Overflow vulnerability in Solaris cachefsd
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
network
low complexity
sun
critical
10.0
2001-12-31 CVE-2001-1503 Information Disclosure vulnerability in Solaris in.fingerd
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.
local
low complexity
sun
2.1