Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2001-0403 — Sunos vulnerability

4 documents4 sources

Severity

7.2HIGHNVD

EPSS

0.4%

top 41.98%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN Sunos

Timeline

PublishedJun 18

Latest updateApr 30

Description

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDsun/sunos5.0

Patches

Patch: archives.neohapsis.com ↗Patch: archives.neohapsis.com ↗

🔴Vulnerability Details

GHSA

GHSA-vcmc-pr46-3j8f: /opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI↗2022-04-30

▶

CVEList

CVE-2001-0403: /opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI↗2001-05-24

▶

💥Exploits & PoCs

Exploit-DB

Junsoft JSparm 4.0 - Logging Output File↗2001-03-23

▶