CVE-2002-1296: High severity sun sunos vulnerability
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pcclname field of a pcinfot structure, which cause priocntl to load a malicious kernel module.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1296?
CVE-2002-1296 is considered a critical vulnerability due to its potential to allow local users to execute arbitrary code.
How do I fix CVE-2002-1296?
To fix CVE-2002-1296, upgrade to a patched version of Solaris that addresses this vulnerability.
Who is affected by CVE-2002-1296?
CVE-2002-1296 affects local users on Solaris systems, specifically versions 5.5.1 through 9.0.
What type of attack can be executed through CVE-2002-1296?
CVE-2002-1296 can be exploited to execute arbitrary code by leveraging directory traversal in the priocntl system call.
What systems are vulnerable to CVE-2002-1296?
The systems vulnerable to CVE-2002-1296 include various versions of SunOS and Solaris, particularly versions 2.6, 5.5.1, 5.7, 5.8, 7.0, 8.0, and 9.0.