Vulnerabilities > CVE-2002-1296 - Local Root vulnerability in Solaris priocntl() System Call

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
sun
NVD
Published: 2002-12-23
Updated: 2018-10-30

Summary

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.

Vulnerable Configurations

Part Description Count
OS
Sun
7

Oval

accepted2005-03-09T07:56:00.000-04:00
classvulnerability
contributors
nameBrian Soby
organizationThe MITRE Corporation
descriptionDirectory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
familyunix
idoval:org.mitre.oval:def:3637
statusaccepted
submitted2005-02-01T12:00:00.000-04:00
titlepriocntl Directory Traversal Vulnerability
version35

References