CVE-2002-1296

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=103842619803173&w=2
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131Patch, Vendor Advisory
http://www.iss.net/security_center/static/10717.phpVendor Advisory
http://www.kb.cert.org/vuls/id/683673Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/6262
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637
http://marc.info/?l=bugtraq&m=103842619803173&w=2
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131Patch, Vendor Advisory
http://www.iss.net/security_center/static/10717.phpVendor Advisory
http://www.kb.cert.org/vuls/id/683673Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/6262
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637

Timeline

Published: Dec 23, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-13067.5Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to e CVE-2002-13076.8Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message CVE-2002-13087.5Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malfor CVE-2002-13097.5Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to CVE-2002-13107.5Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attack CVE-2002-13114.6Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbit CVE-2002-13125.0Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherF CVE-2002-13132.1nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which gener CVE-2002-13156.8Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web s CVE-2002-13166.8importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell m CVE-2002-13177.5Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of CVE-2002-131810.0Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an