Lucene search
HistoryFeb 23, 2005 - 5:00 a.m.
CVE-2004-0481
cve-2004-0481
logging feature
kcms_configure
solaris
symlink attack
nvd
6.6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
12.3%
The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:sunos | sun sunos | eq | 5.8 |
| sun:solaris | sun solaris | eq | 9.0 |
| sun:solaris | sun solaris | eq | 8.0 |
Related
securityvulns
securityvulns
6.6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
12.3%
Related for CVE-2004-0481