Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0027
HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0027

2004-09-0104:00:00
mitre
web.nvd.nist.gov
33
cve
2003
0027
directory traversal
vulnerability
sun
kodak
color management system
kcms
remote attackers
arbitrary files
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.562

Percentile

97.7%

JSON

Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.

Affected configurations

Nvd
Node
sunsolarisMatch2.5.1x86
OR
sunsolarisMatch2.6
OR
sunsolarisMatch7.0x86
OR
sunsolarisMatch8.0x86
OR
sunsolarisMatch9.0sparc
OR
sunsolarisMatch9.0x86_update_2
OR
sunsunosMatch-
OR
sunsunosMatch5.5.1
OR
sunsunosMatch5.7
OR
sunsunosMatch5.8
VendorProductVersionCPE
sunsolaris2.5.1cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*
sunsolaris2.6cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*
sunsunos-cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*
sunsunos5.5.1cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*
sunsunos5.7cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
sunsunos5.8cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

Related

cert 1
packetstorm 1
metasploit 1
nvd 1
cvelist 1
openvas 2
cert
cert
Sun KCMS library service daemon does not adequately validate location of KCMS profiles
2003-01-22 00:00:00
packetstorm
packetstorm
Solaris KCMS + TTDB Arbitrary File Read
2024-08-31 00:00:00
metasploit
metasploit
Solaris KCMS + TTDB Arbitrary File Read
2010-06-24 05:03:12
nvd
nvd
CVE-2003-0027
2003-02-07 05:00:00
cvelist
cvelist
CVE-2003-0027
2004-09-01 04:00:00
openvas
openvas
Solaris Update for kcms_server and kcms_configure 111400-04
2009-06-03 00:00:00
Solaris Update for kcms_server and kcms_configure 111400-04
2009-06-03 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.562

Percentile

97.7%

JSON
Related for CVE-2003-0027
cert1packetstorm1metasploit1nvd1cvelist1openvas2