Sun Solaris 9 - Advisories by Product - Secunia Advisories - Vulnerability Information

This vulnerability report for Sun Solaris 9 contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in Sun Solaris 9 then you are more than welcome to contact us.

Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)

2.1. Statistics for 2009

2.2. Statistics for 2008

2.3. Statistics for 2007

2.4. Statistics for 2006

2.5. Statistics for 2005

2.6. Statistics for 2004

2.7. Statistics for 2003

3. List of Secunia Advisories (All time)

3.1. List for 2009

3.2. List for 2008

3.3. List for 2007

3.4. List for 2006

3.5. List for 2005

3.6. List for 2004

3.7. List for 2003

4. Send Feedback

Vendor, Links, and Unpatched Vulnerabilities

Vendor	Sun Microsystems

Product Link	N/A

Affected By	288 Secunia advisories 477 Vulnerabilities

Monitor Product	Receive alerts for this product

Unpatched	5% (15 of 288 Secunia advisories)

Most Critical Unpatched The most severe unpatched Secunia advisory affecting Sun Solaris 9, with all vendor patches applied, is rated Highly critical .

41 Secunia Advisories in 2003

Secunia has issued a total of 41 Secunia advisories in 2003 for Sun Solaris 9. Currently, 5% (2 out of 41) are marked as unpatched with the most severe being rated Not critical

More information about the specific Secunia advisories affecting Sun Solaris 9 can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.

Sun Solaris Printing Unspecified Privilege Escalation Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 41 in 2003. 9,076 views.

Release Date:
2003-12-15

Secunia Advisory ID:
SA10430

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun has reported some unspecified vulnerabilities in Solaris, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system. [Read More]

Sun Solaris dtprintinfo Privilege Escalation Vulnerability
Vendor Patch. Secunia Advisory 2 of 41 in 2003. 9,585 views.

Release Date:
2003-12-08

Secunia Advisory ID:
SA10384

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious, local users to escalate their privileges. [Read More]

Sun Solaris Xsun DGA Mode Vulnerability
Vendor Patch. Secunia Advisory 3 of 41 in 2003. 9,061 views.

Release Date:
2003-12-03

Secunia Advisory ID:
SA10346

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation
DoS

Where:
Local system

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious, local users to escalate their privileges or cause a DoS (Denial of Service). [Read More]

Solaris BIND Negative Cache Poisoning
Unpatched. Secunia Advisory 4 of 41 in 2003. 9,266 views.

Release Date:
2003-11-28

Secunia Advisory ID:
SA10307

Solution Status:
Unpatched

Criticality:

Impact:
DoS

Where:
From local network

Short Description:
Sun has acknowledged a vulnerability in Solaris, which can be exploited by malicious people to poison the DNS cache with negative entries. [Read More]

Sun Solaris PGX32 Frame Buffer Privilege Escalation Vulnerability
Vendor Patch. Secunia Advisory 5 of 41 in 2003. 9,854 views.

Release Date:
2003-11-20

Secunia Advisory ID:
SA10267

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
A vulnerability has been identified in Sun Solaris, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system. [Read More]

Sun Solaris CDE DtHelp Library Privilege Escalation Vulnerability
Vendor Patch. Secunia Advisory 6 of 41 in 2003. 8,376 views.

Release Date:
2003-11-14

Secunia Advisory ID:
SA10226

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun has acknowledged a vulnerability in the CDE DtHelp Library for Solaris, which can be exploited by malicious, local users to escalate their privileges. [Read More]

Sun Solaris NFS Client Request Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 7 of 41 in 2003. 8,782 views.

Release Date:
2003-10-29

Secunia Advisory ID:
SA10094

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From local network

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Sun Solaris namefs Mounted Pipe and STREAMS Routines Denial of Service
Vendor Patch. Secunia Advisory 8 of 41 in 2003. 8,898 views.

Release Date:
2003-10-15

Secunia Advisory ID:
SA10007

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
Local system

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious, local users to cause a DoS (Denial of Service). [Read More]

Sun Solaris sysinfo Kernel Memory Disclosure Vulnerability
Vendor Patch. Secunia Advisory 9 of 41 in 2003. 10,583 views.

Release Date:
2003-10-15

Secunia Advisory ID:
SA10006

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information
Exposure of sensitive information

Where:
Local system

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious, local users to potentially gain knowledge of sensitive information. [Read More]

Sun Solaris Am7990 Ethernet Driver Frame Padding Vulnerability
Vendor Patch. Secunia Advisory 10 of 41 in 2003. 9,253 views.

Release Date:
2003-10-04

Secunia Advisory ID:
SA9938

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information
Exposure of sensitive information

Where:
From remote

Short Description:
A vulnerability has been identified in the Sun Solaris Am7990 ("LANCE") Ethernet Driver, which can be exploited by malicious people to obtain potentially sensitive information. [Read More]

Sun Solaris Sendmail "prescan()" Buffer Overflow Vulnerability
Vendor Patch. Secunia Advisory 11 of 41 in 2003. 7,651 views.

Release Date:
2003-09-22

Secunia Advisory ID:
SA9808

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
Sun has acknowledged a vulnerability in Solaris, which potentially can be exploited by malicious people to compromise a vulnerable system. [Read More]

Sun Solaris Secure Shell Buffer Management Vulnerability
Vendor Patch. Secunia Advisory 12 of 41 in 2003. 7,976 views.

Release Date:
2003-09-22

Secunia Advisory ID:
SA9806

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS
System access

Where:
From remote

Short Description:
Sun has confirmed a vulnerability in Solaris, which potentially can be exploited by malicious people to compromise a vulnerable system or cause a DoS (Denial of Service). [Read More]

Sun Solaris Sadmind Insecure Default Configuration
Vendor Workaround. Secunia Advisory 13 of 41 in 2003. 19,163 views.

Release Date:
2003-09-16

Secunia Advisory ID:
SA9742

Solution Status:
Vendor Workaround

Criticality:

Impact:
System access

Where:
From local network

Short Description:
Sun has issued a security alert for Sun Solaris to raise awareness of the known insecure default configuration of sadmind (Solstice Administration Daemon) because an exploit has been discovered in the wild. [Read More]

Sun Solaris WU-FTPD Vulnerability
Vendor Patch. Secunia Advisory 14 of 41 in 2003. 8,841 views.

Release Date:
2003-08-14

Secunia Advisory ID:
SA9521

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
Sun has acknowledged a vulnerability in Solaris, which potentially can be exploited by malicious users to compromise a vulnerable system. [Read More]

Sun Solaris Unspecified Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 15 of 41 in 2003. 8,370 views.

Release Date:
2003-08-01

Secunia Advisory ID:
SA9415

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
Local system

Short Description:
Sun has issued patches to fix an unspecified Denial of Service vulnerability. This allows malicious, local users to cause a kernel panic. [Read More]

Sun Solaris ld.so.1 Privilege Escalation
Vendor Patch. Secunia Advisory 16 of 41 in 2003. 11,659 views.

Release Date:
2003-07-30

Secunia Advisory ID:
SA9388

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
A vulnerability has been identified in the ld.so.1 library. This could be exploited through different applications to escalate privileges. [Read More]

Sun Solaris update for Samba
Vendor Patch. Secunia Advisory 17 of 41 in 2003. 8,950 views.

Release Date:
2003-07-29

Secunia Advisory ID:
SA9384

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
Sun has issued patches for Solaris 9. These fix some older vulnerabilities in Samba, which can be exploited by malicious people to compromise a vulnerable system. [Read More]

Sun Solaris Database Function Privilege Escalation Vulnerabilities
Vendor Patch. Secunia Advisory 18 of 41 in 2003. 9,666 views.

Release Date:
2003-06-20

Secunia Advisory ID:
SA9088

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun has reported some vulnerabilities in Solaris, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system. [Read More]

Sun Solaris "utmp_update" Privilege Escalation Vulnerability
Vendor Patch. Secunia Advisory 19 of 41 in 2003. 9,608 views.

Release Date:
2003-06-06

Secunia Advisory ID:
SA8957

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
A vulnerability has been identified in Sun Solaris, which can be exploited by a malicious, local user to escalate privileges on a vulnerable system. [Read More]

Sun Solaris syslogd Denial of Service
Vendor Patch. Secunia Advisory 20 of 41 in 2003. 9,585 views.

Release Date:
2003-06-05

Secunia Advisory ID:
SA8944

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From local network

Short Description:
A vulnerability has been identified in Sun Solaris, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Sun Solaris "in.telnetd" Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 21 of 41 in 2003. 9,157 views.

Release Date:
2003-06-03

Secunia Advisory ID:
SA8935

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From local network

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious users to cause a DoS (Denial of Service) on a vulnerable system. [Read More]

Sun Solaris rpcbind Denial of Service
Vendor Patch. Secunia Advisory 22 of 41 in 2003. 8,345 views.

Release Date:
2003-04-29

Secunia Advisory ID:
SA8685

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From local network

Short Description:
Sun has reported a vulnerability in Solaris. A malicious person can cause a DoS (Denial of Service) on the rpcbind service, which will block traffic to all RPC services on the vulnerable system. [Read More]

Sun Solaris update for Samba
Vendor Patch. Secunia Advisory 23 of 41 in 2003. 6,679 views.

Release Date:
2003-04-21

Secunia Advisory ID:
SA8627

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From local network

Short Description:
Sun has issued a patch for Solaris 9. This fixes an older vulnerability in samba, which can be exploited by malicious people to compromise a vulnerable server. [Read More]

Samba exploitable buffer overflow
Vendor Patch. Secunia Advisory 24 of 41 in 2003. 15,403 views.

Release Date:
2003-04-07

Secunia Advisory ID:
SA8533

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From local network

Short Description:
Samba is vulnerable to a buffer overflow, which can be exploited by anonymous users. [Read More]

Sun Solaris cachefsd Buffer Overflow
Vendor Patch. Secunia Advisory 25 of 41 in 2003. 6,904 views.

Release Date:
2003-04-03

Secunia Advisory ID:
SA8501

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation
System access

Where:
From local network

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious users to gain root privileges on a vulnerable system. [Read More]

Sun Solaris dtsession privilege escalation
Vendor Patch. Secunia Advisory 26 of 41 in 2003. 8,368 views.

Release Date:
2003-04-01

Secunia Advisory ID:
SA8468

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun Solaris has been found vulnerable to a privilege escalation vulnerability in "dtsession". [Read More]

Sun Solaris "newtask" Command Privilege Escalation
Vendor Patch. Secunia Advisory 27 of 41 in 2003. 7,825 views.

Release Date:
2003-03-31

Secunia Advisory ID:
SA8454

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun has reported a vulnerability in Solaris 9, which can be exploited by malicious, local users to escalate their privileges. [Read More]

Sendmail Address Parsing Buffer Overflow
Vendor Patch. Secunia Advisory 28 of 41 in 2003. 19,027 views.

Release Date:
2003-03-30

Secunia Advisory ID:
SA8446

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS
System access

Where:
From remote

Short Description:
A vulnerability has been discovered in Sendmail, which can be exploited by malicious people to compromise a vulnerable system. [Read More]

Sun Solaris LDAP Name Service Privilege Escalation
Vendor Patch. Secunia Advisory 29 of 41 in 2003. 7,742 views.

Release Date:
2003-03-28

Secunia Advisory ID:
SA8443

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Sun has reported a vulnerability in Solaris, which can be exploited by malicious, local users to escalate their privileges. [Read More]

Multiple Vendor RPC XDR Library Integer Overflow
Vendor Patch. Secunia Advisory 30 of 41 in 2003. 13,861 views.

Release Date:
2003-03-20

Secunia Advisory ID:
SA8347

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS
System access

Where:
From local network

Short Description:
A vulnerability identified in multiple *NIX operating systems and software can be exploited by malicious people to conduct a DoS attack (Denial of Service) on a vulnerable system or potentially compromise it. [Read More]

Samba Packet Fragment Re-assembly Buffer Overflow
Vendor Patch. Secunia Advisory 31 of 41 in 2003. 14,811 views.

Release Date:
2003-03-17

Secunia Advisory ID:
SA8299

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS
System access

Where:
From local network

Short Description:
A vulnerability has been identified in Samba, which can be exploited by a malicious person to compromise a vulnerable server. [Read More]

SUN Solaris sendmail ".forward" vulnerability
Vendor Patch. Secunia Advisory 32 of 41 in 2003. 9,833 views.

Release Date:
2003-03-06

Secunia Advisory ID:
SA8235

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation
DoS

Where:
Local system

Short Description:
A vulnerability in SUN Solaris can be exploited by a malicious, local user to perform a DoS attack (Denial of Service) on a vulnerable system or escalate privileges to "root". [Read More]

SUN Solaris UFS File System Denial of Service
Vendor Patch. Secunia Advisory 33 of 41 in 2003. 7,605 views.

Release Date:
2003-03-06

Secunia Advisory ID:
SA8234

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
Local system

Short Description:
A vulnerability in SUN Solaris 9 on SPARC platforms can be exploited by local, malicious users to perform a DoS attack (Denial of Service) on the system. [Read More]

Sun Solaris UDP RPC Packet DoS
Vendor Patch. Secunia Advisory 34 of 41 in 2003. 8,145 views.

Release Date:
2003-02-19

Secunia Advisory ID:
SA8092

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
A vulnerability identified in Sun Solaris can be exploited by a malicious person to cause a DoS (Denial of Service). [Read More]

Sun Solaris disclosure of other user's email
Vendor Patch. Secunia Advisory 35 of 41 in 2003. 7,518 views.

Release Date:
2003-02-14

Secunia Advisory ID:
SA8058

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
Local system

Short Description:
[Read More]

Solaris FTP server Denial of Service
Vendor Patch. Secunia Advisory 36 of 41 in 2003. 7,987 views.

Release Date:
2003-01-29

Secunia Advisory ID:
SA7968

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
A vulnerability has been reported in Solaris, which can be exploited by malicious users to cause a DoS (Denial of Service). [Read More]

Solaris arbitrary file deletion
Vendor Patch. Secunia Advisory 37 of 41 in 2003. 6,763 views.

Release Date:
2003-01-28

Secunia Advisory ID:
SA7960

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
Solaris ships with the 'at' command used to schedule commands. [Read More]

Sun SEAM Denial of Service
Vendor Patch. Secunia Advisory 38 of 41 in 2003. 6,243 views.

Release Date:
2003-01-24

Secunia Advisory ID:
SA7944

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
Sun Solaris Enterprise Authentication Mechanism (SEAM) is vulnerable to a Denial of Service. [Read More]

Solaris KCMS arbitrary file retrieval
Vendor Patch. Secunia Advisory 39 of 41 in 2003. 6,497 views.

Release Date:
2003-01-24

Secunia Advisory ID:
SA7941

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
Sun Solaris ships with Kodak Color Management System (KCMS). KCMS contains a directory traversal vulnerability, allowing users to retrieve any file as KCMS (kcms_server) runs with root privileges. [Read More]

Solaris utmp_update Buffer Overflow Vulnerability
Vendor Patch. Secunia Advisory 40 of 41 in 2003. 6,682 views.

Release Date:
2003-01-17

Secunia Advisory ID:
SA7892

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
A vulnerability has been reported in Sun Solaris, which can be exploited by malicious, local users to gain escalated privileges. [Read More]

Solaris spoofing vulnerability in wall
Unpatched. Secunia Advisory 41 of 41 in 2003. 8,581 views.

Release Date:
2003-01-07

Secunia Advisory ID:
SA7825

Solution Status:
Unpatched

Criticality:

Impact:
Spoofing

Where:
Local system

Short Description:
Solaris ships with wall, used to broadcast messages to users. A bug has been discovered allowing users to broadcast messages as if they originated from the root user. [Read More]