CVE-2002-1296

CVE-2002-1296 affects Sun Solaris priocntl(2): an attacker with local privileges can exploit directory traversal in the pc_clname field of a pcinfo_t structure to cause priocntl to load a kernel module, achieving superuser code execution. The vulnerability stems from priocntl(2) not adequately va...

CVE-2002-1296: Undefined Security Weakness

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pcclname field of a pcinfot structure, which cause priocntl to load a malicious kernel module...

Solaris priocntl exploit

Moderator note: Messages with links to technical details outside of the message are not approved. Because of the potential delay waiting for another submission, the original message has been modified to include the details. Details follow: Solaris's Got Big problem on System Call priocntl...