CVE

Id
11112  
CVE No.
CVE-2004-2686  
Status
Candidate  
Description
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78251 11112 CVE-2004-2686 MISC:http://www.immunitysec.com/downloads/solaris_kernel_vfs.sxw.pdf  View
78252 11112 CVE-2004-2686 BUGTRAQ:20040407 Solaris vfs_getvfssw() local kernel exploit  View
78253 11112 CVE-2004-2686 URL:http://seclists.org/bugtraq/2004/Apr/0081.html  View
78254 11112 CVE-2004-2686 FULLDISC:20040407 Solaris vfs_getvfssw() local kernel exploit  View
78255 11112 CVE-2004-2686 URL:http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.html  View
78256 11112 CVE-2004-2686 BID:9962  View
78257 11112 CVE-2004-2686 URL:http://www.securityfocus.com/bid/9962  View
78258 11112 CVE-2004-2686 OVAL:oval:org.mitre.oval:def:1381  View
78259 11112 CVE-2004-2686 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1381  View
78260 11112 CVE-2004-2686 SECTRACK:1008833  View

Related JVN