Vulnerabilities > SUN > Sunos > High

DATE CVE VULNERABILITY TITLE RISK
2012-10-17 CVE-2012-3210 Remote Security vulnerability in SUN Sunos 5.11
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via unknown vectors related to Kernel.
network
low complexity
sun
7.8
2012-10-17 CVE-2012-3204 Local Security vulnerability in SUN Sunos 5.11
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management.
local
low complexity
sun
7.2
2012-10-17 CVE-2012-3199 Local Security vulnerability in Oracle Solaris
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gnome Trusted Extension.
local
low complexity
sun
7.2
2012-10-17 CVE-2012-3189 Remote Security vulnerability in SUN Sunos 5.11
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability, related to COMSTAR.
network
low complexity
sun
7.8
2012-08-16 CVE-2012-4297 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.
low complexity
wireshark sun CWE-119
8.3
2012-07-17 CVE-2012-3125 Unspecified vulnerability in SUN Sunos 5.10/5.8/5.9
Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows remote attackers to affect availability, related to TCP/IP.
network
sun
7.1
2012-07-17 CVE-2012-3120 Unspecified vulnerability in SUN Sunos 5.8
Unspecified vulnerability in Oracle Sun Solaris 8 allows remote attackers to affect availability, related to TCP/IP.
network
low complexity
sun
7.8
2012-06-12 CVE-2012-0217 Buffer Errors vulnerability in Freebsd
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application.
7.2
2012-03-20 CVE-2012-1796 Local Security vulnerability in IBM DB2 9.5
Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.
local
low complexity
ibm hp linux sun
7.2
2012-03-20 CVE-2012-0711 Numeric Errors vulnerability in IBM DB2 9.1/9.5/9.7
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
network
low complexity
ibm linux sun CWE-189
7.5