Page 2 of 25 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

24 Jun 1997 — Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/143 •

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 3

19 May 1997 — Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. • https://www.exploit-db.com/exploits/332 •

CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 2

17 May 1997 — The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket. • https://www.exploit-db.com/exploits/19346 •

CVSS: 10.0EPSS: 0%CPEs: 20EXPL: 0

01 Mar 1997 — NFS cache poisoning. • https://www.cve.org/CVERecord?id=CVE-1999-0165 •

CVSS: 9.8EPSS: 0%CPEs: 50EXPL: 3

06 Jan 1997 — Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. • https://www.exploit-db.com/exploits/19350 •

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

01 Oct 1993 — The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

17 Sep 1993 — /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

27 May 1992 — SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

27 Mar 1991 — Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges. • http://www.cert.org/advisories/CA-1991-02.html •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

22 Feb 1991 — Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/105 •