CVE-2004-1767
published 2004-12-31CVE-2004-1767: The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload…
PriorityP424high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.43%
34.9th percentile
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | solaris | — | — |
| sun | solaris | — | — |
| sun | solaris | — | — |
| sun | solaris | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fj6h-66gp-9xqf: The kernel in Solaris 2
ghsa_unreviewed·2022-04-29
CVE-2004-1767 [HIGH] GHSA-fj6h-66gp-9xqf: The kernel in Solaris 2
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
GHSA
GHSA-w8j7-864p-92c6: Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2
ghsa_unreviewed·2022-04-29·CVSS 7.2
CVE-2004-2686 [HIGH] CWE-22 GHSA-w8j7-864p-92c6: Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1http://www.kb.cert.org/vuls/id/702526http://www.securityfocus.com/bid/9477https://exchange.xforce.ibmcloud.com/vulnerabilities/14917https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1http://www.kb.cert.org/vuls/id/702526http://www.securityfocus.com/bid/9477https://exchange.xforce.ibmcloud.com/vulnerabilities/14917https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532
2004-12-31
Published