VULNERABILITY INTELLIGENCE

CVE-2001-0595

CVSS score4.6 MEDIUM
EPSS probability1.25%
CISA KEVNot currently listed
Published2001-08-02
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.

Primary references