Lucene search
K

CVE-2003-0027

🗓️ 01 Sep 2004 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 62 Views🌐 WEB

CVE-2003-0027: Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files

Related
Detection
Refs
Paths
NVD
Node
sunsolarisMatch2.5.1x86
OR
sunsolarisMatch2.6
OR
sunsolarisMatch7.0x86
OR
sunsolarisMatch8.0x86
OR
sunsolarisMatch9.0sparc
OR
sunsolarisMatch9.0x86_update_2
OR
sunsunosMatch-
OR
sunsunosMatch5.5.1
OR
sunsunosMatch5.7
OR
sunsunosMatch5.8
ParameterPositionPathDescriptionCWE
PATHpathetc/shadowDirectory traversal vulnerability allows reading arbitrary files via KCMS server by manipulating the PATH to traverse directories (TT_DB traversal used in the module).CWE-22
PATHpathetc/openwin/devdata/profiles/TT_DB/oid_containerAttempt to trigger TT_DB related traversal to prepare/open files through KCMS RPC traversal chain.CWE-22
PATHpathetc/openwin/etc/devdata/TT_DB/oid_containerAlternate TT_DB traversal path used in the PoC to influence file read via KCMS server.CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:01Current
6.7Medium risk
Vulners AI Score6.7
CVSS 25
EPSS0.25724
62