Vulnerabilities > SUN > Sunos > 5.5.1

DATE CVE VULNERABILITY TITLE RISK
2003-03-03 CVE-2003-0064 The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g.
network
low complexity
sgi hp ibm sun
7.5
2003-02-18 CVE-2003-1079 Denial of Service vulnerability in Sun Solaris UDP RPC Packet
Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
network
low complexity
sun
5.0
2003-02-07 CVE-2003-0027 Unspecified vulnerability in SUN Solaris and Sunos
Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.
network
low complexity
sun
5.0
2003-01-03 CVE-2003-1071 Unspecified vulnerability in SUN Solaris and Sunos
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
local
low complexity
sun
2.1
2002-12-31 CVE-2002-2203 Unspecified vulnerability in SUN Solaris and Sunos
Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information.
local
low complexity
sun
4.9
2002-12-31 CVE-2002-1980 Local Buffer Overflow vulnerability in Sun Solaris Volume Manager
Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors.
local
low complexity
sun
7.2
2002-12-31 CVE-2002-1871 Unspecified vulnerability in SUN Solaris and Sunos
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.
local
low complexity
sun
7.2
2002-12-27 CVE-2002-1584 Privilege Escalation vulnerability in Sun Solaris RPC AUTH_DES
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
network
low complexity
sgi sun
critical
10.0
2002-12-23 CVE-2002-1296 Local Root vulnerability in Solaris priocntl() System Call
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
local
low complexity
sun
7.2
2002-12-11 CVE-2002-1317 Remote Buffer Overrun vulnerability in Multiple Vendor X Font Server
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
network
low complexity
xfree86-project sgi hp sun
7.5