CVE-2001-0403

Solaris - Local Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0403. PoCs published by KimYongJun.

AI-analyzed exploit summary This exploit leverages insufficient file permission checks in JSparm's perfmon utility to overwrite arbitrary files on the system. By specifying a sensitive file (e.g., /.rhosts) as the log file, a local attacker can gain elevated privileges due to the SUID bit and permissive file creation (0666).

Description

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.

Exploits (1)

exploitdb WORKING POC VERIFIED

by KimYongJun · textlocalsolaris

https://www.exploit-db.com/exploits/20715

View Code ZIP pw:eip

This exploit leverages insufficient file permission checks in JSparm's perfmon utility to overwrite arbitrary files on the system. By specifying a sensitive file (e.g., /.rhosts) as the log file, a local attacker can gain elevated privileges due to the SUID bit and permissive file creation (0666).

Classification

Working Poc 90%

Attack Type

Lpe

Complexity

Trivial

Reliability

Reliable

Target: JSparm (Junsoft Performance Analysis Report Maker) perfmon

No auth needed

Prerequisites: local access to the system · JSparm perfmon installed with SUID bit set

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1222 - File and Directory Permissions Modification

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/6267

Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html

Scores

EPSS 0.0068

EPSS Percentile 48.0%

Details

Status published

Products (1)

sun/sunos 5.0

Published Jun 18, 2001

Tracked Since Feb 18, 2026