Solaris vulnerabilities
7 known CVE vulnerabilities in Solaris, translated and rated.
- CVE-1999-1014Medium
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
- CVE-1999-0676Medium
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
- CVE-1999-1023Medium
The useradd command in Solaris 7.0 does not properly interpret certain date formats specified in the '-e' (expiration date) argument, which could allow users to log in after their accounts have expired.
- CVE-1999-0188High
The passwd command in Solaris can be subjected to a denial of service attack.
- CVE-1999-1118Low
The vulnerability in ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
- CVE-1999-0295High
The sysdef command in Solaris allows local users to read kernel memory, potentially leading to root privileges.
- CVE-1999-1413Medium
In Solaris 2.4 before kernel jumbo patch -35, set-gid programs can dump core even if the real user id is not in the set-gid group. This allows local users to overwrite or create files with higher privileges.