CVE-2002-1296

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.62% chance of exploitation in the next 30 days, 47th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=103842619803173&w=2

References

• CVE Record
• NVD entry

Related

• CVE-2002-1275
• CVE-2002-1307
• CVE-2002-1254
• CVE-2002-1317
• CVE-2002-1250
• CVE-2002-1318