CVE-2002-1296

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.62% chance of exploitation in the next 30 days, 49th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=103842619803173&w=2

Security advisories

• http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131
• http://www.iss.net/security_center/static/10717.php
• http://www.kb.cert.org/vuls/id/683673
• http://www.securityfocus.com/bid/6262

References

• CVE Record
• NVD entry