Page 4 of 135 results (0.005 seconds)

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0

31 Dec 2003 — Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a .forward file. • http://secunia.com/advisories/8235 •

CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0

31 Dec 2003 — Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068. • http://secunia.com/advisories/7892 •

CVSS: 7.1EPSS: 0%CPEs: 34EXPL: 0

31 Dec 2003 — BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access. • http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp •

CVSS: 9.8EPSS: 0%CPEs: 8EXPL: 0

17 Dec 2003 — Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files. Múltiples vulnerabilidades desconocidas en lpstat y la librería libprint en Solaris 2.6 a 9 puede permitir a atacantes ejecutar código arbitrario o leer o escribir ficheros arbitrarios. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57451 •

CVSS: 7.2EPSS: 0%CPEs: 6EXPL: 0

11 Dec 2003 — The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. • http://secunia.com/advisories/10411 •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

08 Dec 2003 — Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code. • http://secunia.com/advisories/10384 •

CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0

03 Dec 2003 — The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files. • http://secunia.com/advisories/10346 •

CVSS: 8.2EPSS: 15%CPEs: 58EXPL: 0

02 Dec 2003 — ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value. ISC BIND 8.3.x antes de 8.3.7, y 8.4.x antes de 8.4.3 permite a atacantes remotos envenenar la cache mediante un servidor de nombres malicioso que devuelve respuestas negativas con un valor TTL (time to live) largo. • ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-003.0/CSSA-2004-003.0.txt •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

20 Nov 2003 — Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access. • http://secunia.com/advisories/10267 •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

27 Oct 2003 — The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference. • http://sunsolve.sun.com/search/document.do?assetkey=1-26-57406-1 •