Lucene search

K
cveMitreCVE-2001-0594
HistoryMar 09, 2002 - 5:00 a.m.

CVE-2001-0594

2002-03-0905:00:00
mitre
web.nvd.nist.gov
43
solaris 7
solaris 8
kcms_configure
local attackers
buffer overflow
privileges.

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0

Percentile

0.4%

kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.

Affected configurations

Nvd
Node
sunsolarisMatch7.0x86
OR
sunsolarisMatch8.0x86
OR
sunsunosMatch5.7
OR
sunsunosMatch5.8
VendorProductVersionCPE
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsunos5.7cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
sunsunos5.8cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0

Percentile

0.4%

Related for CVE-2001-0594