vulnwire
2.1low

CVE-2004-0481

The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt ar…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 21%
Public exploits
0
none known

The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.

Exploit prediction (EPSS)

0.29% probability of exploitation in the next 30 days, higher than 21% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

References

  • idefense.com /application/poi/display?id=206&type=vulnerabilities · third-party-advisory, x_refsource_IDEFENSE, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-57706-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.