CVE-2001-0595

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-08-02 · updated 2026-06-16

Description

Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.

Affected products

Sunos: 5.7, 5.8

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html
http://www.securityfocus.com/bid/2605
https://exchange.xforce.ibmcloud.com/vulnerabilities/6365
http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html
http://www.securityfocus.com/bid/2605
https://exchange.xforce.ibmcloud.com/vulnerabilities/6365

Get alerted when CVE-2001-0595 or the next vulnerability affects your stack