# Sun vulnerabilities

Source: https://junglewise.ai/threats/vendors/sun  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/sun.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 25 vulnerabilities in Sun: 0 in the last 7 days and 0 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-1999-0795, was published on 1 March 1998. 2 technologies have a page of their own.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 25 (3 critical, 0 exploited in the wild)

## About Sun

Technology company that developed Java, Solaris, and other software and hardware systems.

## Latest Sun vulnerabilities

- [CVE-1999-0795: Sun NIS+ authentication bypass in rpc.nisd](https://junglewise.ai/threats/cve-1999-0795-sun-nis-authentication-bypass-in-rpc-nisd) (high, CVSS 7.5, published 1 Mar 1998)
- [CVE-1999-0502: Unix default or blank password for system account](https://junglewise.ai/threats/cve-1999-0502-unix-default-or-blank-password-for-system-account) (high, CVSS 7.5, published 1 Mar 1998)
- [CVE-1999-0296: Sun Solaris arbitrary file read in volrmmount](https://junglewise.ai/threats/cve-1999-0296-sun-solaris-arbitrary-file-read-in-volrmmount) (high, CVSS 7.2, published 1 Feb 1998)
- [CVE-1999-0513: Sun Solaris ICMP broadcast response denial of service](https://junglewise.ai/threats/cve-1999-0513-sun-solaris-icmp-broadcast-response-denial-of-service) (medium, CVSS 5, published 5 Jan 1998)
- [CVE-1999-0273: Sun Solaris Telnet denial of service via control characters](https://junglewise.ai/threats/cve-1999-0273-sun-solaris-telnet-denial-of-service-via-control-characters) (medium, CVSS 5, published 1 Jan 1998)
- [CVE-1999-0018: Sun Solaris statd buffer overflow](https://junglewise.ai/threats/cve-1999-0018-sun-solaris-statd-buffer-overflow) (critical, CVSS 10, published 5 Dec 1997)
- [CVE-1999-0169: NFS unauthorized file access via UID spoofing](https://junglewise.ai/threats/cve-1999-0169-nfs-unauthorized-file-access-via-uid-spoofing) (critical, CVSS 10, published 1 Jul 1997)
- [CVE-1999-1449: Sun Microsystems SunOS kernel panic via /dev/tcx0 read](https://junglewise.ai/threats/cve-1999-1449-sun-microsystems-sunos-kernel-panic-via-dev-tcx0-read) (low, CVSS 2.1, published 19 May 1997)
- [CVE-1999-0038: Sun Solaris xlock buffer overflow privilege escalation](https://junglewise.ai/threats/cve-1999-0038-sun-solaris-xlock-buffer-overflow-privilege-escalation) (high, CVSS 8.4, published 26 Apr 1997)
- [CVE-1999-0966: Sun Solaris buffer overflow in libc getopt function](https://junglewise.ai/threats/cve-1999-0966-sun-solaris-buffer-overflow-in-libc-getopt-function) (high, CVSS 7.2, published 27 Jan 1997)
- [CVE-1999-0166: NFS directory traversal via parent directory navigation](https://junglewise.ai/threats/cve-1999-0166-nfs-directory-traversal-via-parent-directory-navigation) (medium, CVSS 5, published 1 Jan 1997)
- [CVE-1999-0626: rusers information disclosure of valid user accounts](https://junglewise.ai/threats/cve-1999-0626-rusers-information-disclosure-of-valid-user-accounts) (info, CVSS 0, published 1 Jan 1997)
- [CVE-1999-0277: Sun WorkMan arbitrary file overwrite and privilege escalation](https://junglewise.ai/threats/cve-1999-0277-sun-workman-arbitrary-file-overwrite-and-privilege-escalation) (high, CVSS 7.2, published 28 Oct 1996)
- [CVE-1999-0132: Sun Solaris Expreserve arbitrary file overwrite in vi and ex](https://junglewise.ai/threats/cve-1999-0132-sun-solaris-expreserve-arbitrary-file-overwrite-in-vi-and-ex) (low, CVSS 2.1, published 15 Aug 1996)
- [CVE-1999-1413: Sun Solaris set-gid core dump file overwrite](https://junglewise.ai/threats/cve-1999-1413-sun-solaris-set-gid-core-dump-file-overwrite) (medium, CVSS 4.6, published 3 Aug 1996)
- [CVE-1999-0142: Netscape Navigator and JDK Security Manager restriction bypass](https://junglewise.ai/threats/cve-1999-0142-netscape-navigator-and-jdk-security-manager-restriction-bypass) (high, CVSS 7.5, published 1 Mar 1996)
- [CVE-1999-0241: X Window System guessable magic cookies remote command execution](https://junglewise.ai/threats/cve-1999-0241-x-window-system-guessable-magic-cookies-remote-command-execution) (critical, CVSS 10, published 1 Nov 1995)
- [CVE-1999-1080: Sun SunOS rmmount privilege escalation via removable media](https://junglewise.ai/threats/cve-1999-1080-sun-sunos-rmmount-privilege-escalation-via-removable-media) (high, CVSS 7.2, published 10 May 1995)
- [CVE-1999-1388: Sun Microsystems SunOS symlink attack in passwd utility](https://junglewise.ai/threats/cve-1999-1388-sun-microsystems-sunos-symlink-attack-in-passwd-utility) (medium, CVSS 6.2, published 13 May 1994)
- [CVE-1999-0334: Sun Solaris root privilege escalation via fsck failure during startup](https://junglewise.ai/threats/cve-1999-0334-sun-solaris-root-privilege-escalation-via-fsck-failure-during) (high, CVSS 7.2, published 16 Dec 1993)
- [CVE-1999-1142: Sun Microsystems SunOS privilege escalation via LD_* environment variables](https://junglewise.ai/threats/cve-1999-1142-sun-microsystems-sunos-privilege-escalation-via-ld-environment) (high, CVSS 7.2, published 27 May 1992)
- [CVE-1999-0167: Sun Microsystems SunOS NFS file handle prediction vulnerability](https://junglewise.ai/threats/cve-1999-0167-sun-microsystems-sunos-nfs-file-handle-prediction-vulnerability) (medium, CVSS 4.6, published 6 Dec 1991)
- [CVE-1999-1211: Sun Microsystems SunOS privilege escalation in in.telnetd](https://junglewise.ai/threats/cve-1999-1211-sun-microsystems-sunos-privilege-escalation-in-in-telnetd) (high, CVSS 7.2, published 27 Mar 1991)
- [CVE-1999-1197: Sun Microsystems SunOS privilege escalation in TIOCCONS](https://junglewise.ai/threats/cve-1999-1197-sun-microsystems-sunos-privilege-escalation-in-tioccons) (high, CVSS 7.2, published 20 Dec 1990)
- [CVE-1999-0084: Generic NFS Server privilege escalation via mknod kmem device](https://junglewise.ai/threats/cve-1999-0084-generic-nfs-server-privilege-escalation-via-mknod-kmem-device) (high, CVSS 8.4, published 1 May 1990)

## Most severe Sun vulnerabilities

- [CVE-1999-0018: Sun Solaris statd buffer overflow](https://junglewise.ai/threats/cve-1999-0018-sun-solaris-statd-buffer-overflow) (critical, CVSS 10, published 5 Dec 1997)
- [CVE-1999-0169: NFS unauthorized file access via UID spoofing](https://junglewise.ai/threats/cve-1999-0169-nfs-unauthorized-file-access-via-uid-spoofing) (critical, CVSS 10, published 1 Jul 1997)
- [CVE-1999-0241: X Window System guessable magic cookies remote command execution](https://junglewise.ai/threats/cve-1999-0241-x-window-system-guessable-magic-cookies-remote-command-execution) (critical, CVSS 10, published 1 Nov 1995)
- [CVE-1999-0038: Sun Solaris xlock buffer overflow privilege escalation](https://junglewise.ai/threats/cve-1999-0038-sun-solaris-xlock-buffer-overflow-privilege-escalation) (high, CVSS 8.4, published 26 Apr 1997)
- [CVE-1999-0084: Generic NFS Server privilege escalation via mknod kmem device](https://junglewise.ai/threats/cve-1999-0084-generic-nfs-server-privilege-escalation-via-mknod-kmem-device) (high, CVSS 8.4, published 1 May 1990)
- [CVE-1999-0502: Unix default or blank password for system account](https://junglewise.ai/threats/cve-1999-0502-unix-default-or-blank-password-for-system-account) (high, CVSS 7.5, published 1 Mar 1998)
- [CVE-1999-0795: Sun NIS+ authentication bypass in rpc.nisd](https://junglewise.ai/threats/cve-1999-0795-sun-nis-authentication-bypass-in-rpc-nisd) (high, CVSS 7.5, published 1 Mar 1998)
- [CVE-1999-0142: Netscape Navigator and JDK Security Manager restriction bypass](https://junglewise.ai/threats/cve-1999-0142-netscape-navigator-and-jdk-security-manager-restriction-bypass) (high, CVSS 7.5, published 1 Mar 1996)
- [CVE-1999-0296: Sun Solaris arbitrary file read in volrmmount](https://junglewise.ai/threats/cve-1999-0296-sun-solaris-arbitrary-file-read-in-volrmmount) (high, CVSS 7.2, published 1 Feb 1998)
- [CVE-1999-0966: Sun Solaris buffer overflow in libc getopt function](https://junglewise.ai/threats/cve-1999-0966-sun-solaris-buffer-overflow-in-libc-getopt-function) (high, CVSS 7.2, published 27 Jan 1997)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Sun technologies

- [SunOS](https://junglewise.ai/threats/technologies/sunos): 22 vulnerabilities
- [Sun Nfs](https://junglewise.ai/threats/technologies/nfs): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Sun vulnerabilities", https://junglewise.ai/threats/vendors/sun, 9 November 2026.