CVE-2011-0902

Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

1.52% chance of exploitation in the next 30 days, 73th percentile

Published

2011-02-07

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/16041

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16041

References

• CVE Record
• NVD entry

Related

• CVE-2011-0901
• CVE-2011-0903
• CVE-2011-0900
• CVE-2011-0917
• CVE-2011-0887
• CVE-2011-0920