
CVE-2001-0548 – Solaris 2.6/7.0 - DTMail Mail Environment Variable Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0548
14 Aug 2001 — Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable. • https://www.exploit-db.com/exploits/21024 •

CVE-2001-0594 – Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0594
02 Aug 2001 — kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument. • https://www.exploit-db.com/exploits/20740 •

CVE-2001-0353
https://notcve.org/view.php?id=CVE-2001-0353
21 Jul 2001 — Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206 •

CVE-2001-1076 – Solaris 2.6/2.6/7.0/8 whodo - Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-1076
05 Jul 2001 — Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable. • https://www.exploit-db.com/exploits/20974 •

CVE-2001-0423 – Solaris 7.0/8 - IPCS Timezone Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0423
02 Jul 2001 — Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerability than CAN-2002-0093. • https://www.exploit-db.com/exploits/20751 •

CVE-2001-0422 – Solaris 2.x/7.0/8 - Xsun HOME Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0422
02 Jul 2001 — Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. • https://www.exploit-db.com/exploits/20743 •

CVE-2001-0426 – SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0426
24 May 2001 — Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable. • https://www.exploit-db.com/exploits/20766 •

CVE-2001-0421 – Solaris 2.6 - FTP Core Dump Shadow Password Recovery
https://notcve.org/view.php?id=CVE-2001-0421
24 May 2001 — FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition. • https://www.exploit-db.com/exploits/20764 •

CVE-2001-0249
https://notcve.org/view.php?id=CVE-2001-0249
24 May 2001 — Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings. • http://www.cert.org/advisories/CA-2001-07.html • CWE-131: Incorrect Calculation of Buffer Size •

CVE-2001-0401 – Solaris 2.5/2.6/7.0/8 tip - Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0401
24 May 2001 — Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. • https://www.exploit-db.com/exploits/20684 •