Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2001-0652 — Sunos vulnerability

5 documents4 sources

Severity

7.2HIGHNVD

EPSS

0.1%

top 70.49%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN Sunos

Timeline

PublishedOct 30

Latest updateApr 30

Description

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDsun/sunos5.9

🔴Vulnerability Details

GHSA

GHSA-j3w4-jrr4-3qpc: Heap overflow in xlock in Solaris 2↗2022-04-30

▶

CVEList

CVE-2001-0652: Heap overflow in xlock in Solaris 2↗2002-03-09

▶

💥Exploits & PoCs

Exploit-DB

Solaris 2.6/7/8 (SPARC) - xlock Heap Overflow↗2001-08-10

▶

Exploit-DB

Solaris 8 - x86 xlock Heap Overflow↗2001-08-10

▶