CVE-2001-0403 Privilege escalation in n/a

High 7.2 Published 24 May 2001 Updated 8 Aug 2024

Local attackers can escalate privileges to root by exploiting the Logging File option in the Solaris perfmon GUI to create arbitrary files.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2001-0403?

CVE-2001-0403 is a high-severity vulnerability in Sun Sunos, published on 24 May 2001. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.

Which versions are affected by CVE-2001-0403?

It affects 1 product.

Products include Sun Sunos.

How do I fix CVE-2001-0403?

No fix has been published for CVE-2001-0403 yet. Limit exposure of the affected software until one is available.

Is CVE-2001-0403 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2001-0403 exists.

Public exploit code: 1 Exploit-DB entry.

All Sun Sunos vulnerabilities

Sources

Also known as GHSA-vcmc-pr46-3j8f.