CVE-2004-2686: Path Traversal
Directory traversal vulnerability in the vfsgetvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What systems are affected by CVE-2004-2686?
CVE-2004-2686 affects Solaris 2.6, 7, 8, and 9, including specific versions of SunOS.
What is the nature of the vulnerability in CVE-2004-2686?
CVE-2004-2686 is a directory traversal vulnerability that allows local users to load arbitrary kernel modules.
What can an attacker do by exploiting CVE-2004-2686?
An attacker exploiting CVE-2004-2686 can potentially execute malicious code in the kernel, compromising system integrity.
How do I mitigate the risk of CVE-2004-2686?
To mitigate CVE-2004-2686, users should upgrade to a patched version of Solaris or apply any recommended security updates.
Is CVE-2004-2686 related to any other vulnerabilities?
Yes, CVE-2004-2686 might be related to CVE-2004-1767, although details to confirm this connection are insufficient.