Lucene search
MitreCVE-2002-1296HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1296
2004-09-0104:00:00
mitre
web.nvd.nist.gov
28
solaris
priocntl
directory traversal
vulnerability
kernel module
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
25.7%
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via “…” sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
Affected configurations
Node
sunsolarisMatch2.6
ORsunsolarisMatch7.0x86
ORsunsolarisMatch8.0x86
ORsunsolarisMatch9.0sparc
ORsunsunosMatch5.5.1
ORsunsunosMatch5.7
ORsunsunosMatch5.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | solaris | 2.6 | cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:* |
| sun | solaris | 7.0 | cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* |
| sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* |
| sun | solaris | 9.0 | cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:* |
| sun | sunos | 5.5.1 | cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:* |
| sun | sunos | 5.7 | cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:* |
| sun | sunos | 5.8 | cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:* |
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
25.7%
Related for CVE-2002-1296