CVSS: 6.9EPSS: 0%CPEs: 2EXPL: 0CVE-2007-0503
https://notcve.org/view.php?id=CVE-2007-0503
Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vectors. Vulnerabilidad no especificada en kcms_calibrate en Sun Solaris 8 y 9 anterior al 22/11/2007 permite a usuarios locales ejecutar comandos de su elección mediante vectores desconocidos. • http://osvdb.org/31598 http://secunia.com/advisories/23885 http://securitytracker.com/id?1017541 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102728-1 http://support.avaya.com/elmodocs2/security/ASA-2007-040.htm http://www.securityfocus.com/bid/22175 http://www.vupen.com/english/advisories/2007/0287 https://exchange.xforce.ibmcloud.com/vulnerabilities/31668 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1495 •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-2007-0470
https://notcve.org/view.php?id=CVE-2007-0470
Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors. Múltiples vulnerabilidades no especificadas en tip de Sun Solaris 8, 9, y 10 permite a usuarios locales obtener privilegios de cuentas uucp mediante vectores no especificados. • http://osvdb.org/31616 http://secunia.com/advisories/23821 http://securitytracker.com/id?1017546 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102773-1 http://www.securityfocus.com/bid/22190 http://www.vupen.com/english/advisories/2007/0317 https://exchange.xforce.ibmcloud.com/vulnerabilities/31669 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2038 •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2007-0393
https://notcve.org/view.php?id=CVE-2007-0393
Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572. Sun Solaris 9 no verfica adecuadamenet el estado de los descriptores de fichero anterior a la ejecución del setuid, lo cual permite a un usuario local obtener privilegios a través del cierre del descriptor 0,1 o 2 y por tanto invocando un programa setuid, una variante de CVE-2002-0572. • http://www.securityfocus.com/archive/1/457279/100/0/threaded http://www.securityfocus.com/archive/1/457315/100/0/threaded •
CVSS: 7.8EPSS: 54%CPEs: 2EXPL: 1CVE-2007-0165 – Sun Solaris 9 - RPC Request Denial of Service
https://notcve.org/view.php?id=CVE-2007-0165
Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests that trigger a crash in rpcbind. Vulnerabilidad no especificada en libnsl de Sun Solaris 8 y 9 permite a atacantes remotos provocar una denegación de servicio (caída) mediante peticiones RPC manipuladas que disparan una caída en rpcbind. • https://www.exploit-db.com/exploits/29406 http://osvdb.org/31576 http://secunia.com/advisories/23700 http://secunia.com/advisories/24056 http://securitytracker.com/id?1017492 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102713-1 http://support.avaya.com/elmodocs2/security/ASA-2007-036.htm http://www.securityfocus.com/bid/21964 http://www.vupen.com/english/advisories/2007/0110 https://exchange.xforce.ibmcloud.com/vulnerabilities/31366 https://oval.cisecurity.org •
CVSS: 6.6EPSS: 0%CPEs: 3EXPL: 0CVE-2006-6494
https://notcve.org/view.php?id=CVE-2006-6494
Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. (dot dot) sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers. Vulnerabilidad de escalado de directorio en ld.so.1 del Sun Solaris 8, 9 y 10 permite a usuarios locales ejecutar código de su elección a través de la secuencia .. (punto punto) en la variable de entorno LANG que señala a un fichero local que contiene controles de ataque en un formato de cadena específico. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=449 http://secunia.com/advisories/23317 http://securitytracker.com/id?1017376 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102724-1 http://www.securityfocus.com/bid/21564 http://www.vupen.com/english/advisories/2006/4979 https://exchange.xforce.ibmcloud.com/vulnerabilities/30849 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2121 •