Solaris VFS Directory Traversal Vulnerability

CVE-2004-2686 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.

Learn more about our Cis Benchmark Audit For Oracle Solaris.