CVE-2004-1394: Medium severity Sun SunOS vulnerability
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the execattr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1394?
CVE-2004-1394 is considered to have a moderate severity due to the risk of local privilege escalation.
How do I fix CVE-2004-1394?
To fix CVE-2004-1394, ensure that the exec_attr database is properly configured without invalid entries.
Who is affected by CVE-2004-1394?
CVE-2004-1394 affects users operating on Sun Solaris 8 and 9 systems with custom rights profiles.
What potential impact does CVE-2004-1394 have?
CVE-2004-1394 may allow local users to execute commands with elevated privileges, compromising system security.
Is there a known exploit for CVE-2004-1394?
While there are no widely reported public exploits for CVE-2004-1394, the vulnerability presents a potential risk for exploitation.