NetSight
IP …
medium4.6Public exploit code

CVE-2001-0594

kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.

Affected products

VendorProductAffected versions
SunSolaris
Versions 7.0, 8.0
SunSunos
Versions 5.7, 5.8

References