CVE-2002-1296

Опубликовано: 23 дек. 2002

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.

Ссылки

http://marc.info/?l=bugtraq&m=103842619803173&w=2
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10717.php
Vendor Advisory
http://www.kb.cert.org/vuls/id/683673
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/6262
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637
http://marc.info/?l=bugtraq&m=103842619803173&w=2
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10717.php
Vendor Advisory
http://www.kb.cert.org/vuls/id/683673
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/6262
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*

cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*

cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*

cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00027

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2r2c-grqr-jcvc

github

больше 3 лет назад