Sun Microsystems Solaris 2.5

Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits.

Published: 2006-05-05T22:00:00.000Z
Updated: 2024-09-16T18:23:28.069Z

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.

Published: 2005-02-08T05:00:00.000Z
Updated: 2024-08-08T02:12:36.000Z

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

Published: 2003-04-01T05:00:00.000Z
Updated: 2024-08-08T01:43:36.017Z

Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.

Published: 2002-10-21T04:00:00.000Z
Updated: 2024-08-08T03:19:28.255Z

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.

Published: 2002-03-07T05:00:00.000Z
Updated: 2024-08-08T02:35:17.569Z