4.6
CVSSv2

CVE-2001-0595

Published: 02/08/2001 Updated: 30/10/2018
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 470
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local malicious users to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.

Vulnerable Product Search on Vulmon Subscribe to Product

sun sunos 5.7

sun sunos 5.8

Exploits

/* source: wwwsecurityfocuscom/bid/2605/info The Kodak Color Management System configuration tool 'kcms_configure' is vulnerable to a buffer overflow that could yield root privileges to an attacker The bug exists in the KCMS_PROFILES environment variable parser in a shared library 'kcsSUNWIOsolfso' used by kcms_configure If an overl ...
/* source: wwwsecurityfocuscom/bid/2605/info The Kodak Color Management System configuration tool 'kcms_configure' is vulnerable to a buffer overflow that could yield root privileges to an attacker The bug exists in the KCMS_PROFILES environment variable parser in a shared library 'kcsSUNWIOsolfso' used by kcms_configure If an overly ...