Vulnerability in Sun Solaris

CVE-2004-0481

The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.

EPSS: 0.003 (20.9th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 8.0, 9.0
Sun Sunos — versions 5.8
N/a — versions n/a

References

cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT, Vendor Advisory)