PT-2004-2671 · Sun · Sun Solaris

Published 2004-12-31 · Updated 2018-10-30 · CVE-2004-1767

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 2.6 through 9

Description The issue allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.

Recommendations For Sun Solaris versions 2.6 through 9, consider restricting the ability to load kernel modules to minimize the risk of exploitation. As a temporary workaround, consider disabling the use of arbitrary loadable kernel modules until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2004-1767

Affected Products

Sun Solaris

References · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1767 · Security Note
• http://securityfocus.com/bid/9477 · Patch
• http://kb.cert.org/vuls/id/702526 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14917 · Note