← back
CVE-2004-2686

CVE-2004-2686

EPSS 1.2%
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/23874unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://seclists.org/bugtraq/2004/Apr/0081.htmlhttp://securitytracker.com/id?1008833https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1381http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.htmlhttp://www.immunitysec.com/downloads/solaris_kernel_vfs.sxw.pdfhttp://www.securityfocus.com/bid/9962