CVE-2003-0027

SUN Solaris - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.

Exploits (1)

metasploit WORKING POC

rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/sunrpc/solaris_kcms_readfile.rb

View Code ZIP pw:eip

References (9)

[Mailing List] http://marc.info/?l=bugtraq&m=104326556329850&w=2

[Vendor Advisory] http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/50104

[Patch, Vendor Advisory] http://www.entercept.com/news/uspr/01-22-03.asp

[Patch, Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/850785

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/6665

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/11129

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A120

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A195

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2592

Scores

EPSS 0.6515

EPSS Percentile 98.5%

Details

Status published

Products (9)

sun/solaris 2.5.1

sun/solaris 2.6

sun/solaris 7.0

sun/solaris 8.0

sun/solaris 9.0 (2 CPE variants)

sun/sunos

sun/sunos 5.5.1

sun/sunos 5.7

sun/sunos 5.8

Published Feb 07, 2003

Tracked Since Feb 18, 2026