Vulnerabilidades

Sun's ftpd daemon can be subjected to a denial of service.

Buffer overflow in NIS+, in Sun's rpc.nisd program.

Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.

Buffer overflows in Sun libnsl allow root access.

Solaris ufsrestore buffer overflow.

Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.

Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.

SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.

A Unix account has a default, null, blank, or missing password.

Solaris volrmmount program allows attackers to read any file.

Buffer overflow in SGI IRIX mailx program.

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

Denial of service through Solaris 2.5.1 telnet by sending ^D characters.

A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.

Teardrop IP denial of service.

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Buffer overflow in statd allows root privileges.

Land IP denial of service.

Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.

The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).