VDB

GCVE-110-CERTCC-2002-850785

GCVE-110-CERTCC-2002-850785
Advisory Published
Vulnetix · Advisory published January 22, 2003
The Sun KCMS library service daemon, kcms_server, does not adequately validate the location of KCMS profile files. This could allow a remote attacker to read arbitrary files on a vulnerable system.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact8population14exploitation0widely_known1score_current2.0475ease_of_exploitation13

Aliases

CVE-2003-0027

Transitive aliases

GHSA-8h4x-5hq8-x8hcGSD-2003-0027EUVD-2003-0027

References

Sun KCMS library service daemon does not adequately validate location of KCMS profiles
advisory
Sun KCMS library service daemon does not adequately validate location of KCMS profiles
url
Sun KCMS library service daemon does not adequately validate location of KCMS profiles
url
Sun KCMS library service daemon does not adequately validate location of KCMS profiles
url
Sun KCMS library service daemon does not adequately validate location of KCMS profiles
url

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›