Vulnerabilities > SUN > Solaris > 9.0

DATE CVE VULNERABILITY TITLE RISK
2003-02-07 CVE-2003-0027 Unspecified vulnerability in SUN Solaris and Sunos
Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.
network
low complexity
sun
5.0
2003-01-27 CVE-2003-1075 Remote Denial of Service vulnerability in Solaris in.ftpd
Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.
network
low complexity
sun
5.0
2003-01-03 CVE-2003-1071 Unspecified vulnerability in SUN Solaris and Sunos
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
local
low complexity
sun
2.1
2002-12-31 CVE-2002-2089 Buffer Overflow vulnerability in SUN Solaris 9.0
Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.
local
low complexity
sun
4.6
2002-12-23 CVE-2002-1296 Local Root vulnerability in Solaris priocntl() System Call
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
local
low complexity
sun
7.2
2002-12-11 CVE-2002-1323 Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
local
low complexity
safe-pm sun sgi redhat sco
4.6
2002-12-11 CVE-2002-1317 Remote Buffer Overrun vulnerability in Multiple Vendor X Font Server
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
network
low complexity
xfree86-project sgi hp sun
7.5
2002-12-03 CVE-2002-1586 Denial Of Service vulnerability in Sun Solaris System Panic
Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
local
low complexity
sun
2.1
2002-11-08 CVE-2002-1585 Denial Of Service vulnerability in Sun Solaris Network Interface
Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.
network
low complexity
sun
5.0
2002-10-28 CVE-2002-1228 Remote Denial of Service vulnerability in Solaris NFS lockd
Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.
network
low complexity
sun
5.0