Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2004-0360 — Solaris vulnerability

4 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.3%
top 46.38%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
SUN SolarisSUN Sunos
Timeline
PublishedNov 23
Latest updateApr 29

Description

Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDsun/solaris8.0, 9.0+1
▶NVDsun/sunos5.8

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-m84w-pr2q-p5w6: Unknown vulnerability in passwd(1) in Solaris 8↗2022-04-29
▶
CVEList
CVE-2004-0360: Unknown vulnerability in passwd(1) in Solaris 8↗2004-03-18
▶

💥Exploits & PoCs

1
Exploit-DB
Solaris 8/9 passwd - 'circ()' Local Privilege Escalation↗2004-12-24
▶
CVE-2004-0360 — SUN Solaris vulnerability | cvebase