What’s Vulnerable › Vulnerabilities

CVE-2003-0091

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-04-02 · updated 2026-06-16

Description

Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.

Affected products

• Sun Solaris: 2.6
• Sunos: 5.5.1, 5.7

References

• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0162.html
• http://packetstormsecurity.org/0304-advisories/sa2003-02.txt
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-52443-1
• http://www.ciac.org/ciac/bulletins/n-068.shtml
• http://www.nsfocus.com/english/homepage/sa2003-02.htm
• http://www.osvdb.org/8713
• http://www.securityfocus.com/archive/1/316957/30/25250/threaded
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4383
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0162.html
• http://packetstormsecurity.org/0304-advisories/sa2003-02.txt
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-52443-1
• http://www.ciac.org/ciac/bulletins/n-068.shtml

Get alerted when CVE-2003-0091 or the next vulnerability affects your stack