Vulnerability Details CVE-2002-1296
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.8%
CVSS Severity
CVSS v2 Score 7.2
References
- http://marc.info/?l=bugtraq&m=103842619803173&w=2
- http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131
- http://www.iss.net/security_center/static/10717.php
- http://www.kb.cert.org/vuls/id/683673
- http://www.securityfocus.com/bid/6262
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637
- http://marc.info/?l=bugtraq&m=103842619803173&w=2
- http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131
- http://www.iss.net/security_center/static/10717.php
- http://www.kb.cert.org/vuls/id/683673
- http://www.securityfocus.com/bid/6262
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637
Products affected by CVE-2002-1296
-
cpe:2.3:o:sun:solaris:2.6
-
cpe:2.3:o:sun:solaris:7.0
-
cpe:2.3:o:sun:solaris:8.0
-
cpe:2.3:o:sun:solaris:9.0
-
cpe:2.3:o:sun:sunos:5.5.1
-
cpe:2.3:o:sun:sunos:5.7
-
cpe:2.3:o:sun:sunos:5.8