Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Solaris kcms_configure 缓冲区溢出漏洞
Vulnerability Description
CVE(CAN) ID: CVE-2001-0595 Solaris所带的配置工具 "kcms_configure" 易于遭受缓冲区溢出攻击，攻击 者可以获取root权限。 kcms_configure使用到环境变量KCMS_PROFILES，而动态链接库kcsSUNWIOsolf.so提 供了对环境变量KCMS_PROFILES的解析功能。如果该环境变量的值超长，运行 kcms_configure时就会发生缓冲区溢出，因为kcms_configure是setuid-to-root的， 本地攻击者将获取r
CVSS Information
N/A
Vulnerability Type
N/A