Russian Vulnerability Scanner Database

Back to List

CVE-2003-0027

Scores

EPSS

0.000none0.0%
0%20%40%60%80%100%

Percentile: 0.0%

CVSS

5.0medium2.0
0246810

CVSS Score: 5.0/10

All CVSS Scores

CVSS 2.0
5.0

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

Recommendations

Source: nvd

Apply PatchWhen available, apply the appropriate patch as referenced by Sun.Disable kcms_serverUntil patches are available and can be applied, disable the KCMS library service daemon by commenting out the appropriate entry in /etc/inetd.conf, terminating any currently running kcms_server processes, and restarting the Internet services daemon inetd(1M). The rpcinfo(1M), netstat(1M), and ps(1) commands may be useful in determining if the KCMS library service daemon is enabled.The following examples are from a SunOS 5.8 (Solaris 8) system:[/etc/inetd.conf]## Sun KCMS Profile Server#100221⁄1        tli     rpc/tcp wait root /usr/openwin/bin/kcms_server  kcms_serverThe KCMS library service is assigned RPC program number 100221.$ rpcinfo -p |grep 100221    100221    1   tcp  32781$ netstat -a |grep 32781      *.32781                               Idle      .32781              .*                0      0 24576      0 LISTEN$ ps -ef |grep kcms_server    root   484   156  0 15:12:01 ?        0:00 kcms_serverAs a general best practice, the CERT/CC recommends disabling any services that are not explicitly required.Block or Restrict AccessUntil patches are available and can be applied, block or restrict access to the RPC portmapper service and the KCMS library service daemon from untrusted networks such as the Internet. The RPC portmapper service typically runs on ports 111/tcp and 111/udp. In the above example, the KCMS library service daemon is configured to run on 32781/tcp, however, this port number may vary. Also, consider blocking or restricting access to the ToolTalk database server (RPC program number 100083). Keep in mind that blocking ports at a network perimeter does not protect the vulnerable service from the internal network. It is important to understand your network configuration and service requirements before deciding what changes are appropriate.

URL: http://www.kb.cert.org/vuls/id/850785

Vulnerable Software (2)

Type: Configuration

Vendor: sun

Product: solaris

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*",      "vuln...

Source: nvd

Type: Configuration

Vendor: sun

Product: sunos

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*",      "vuln...

Source: nvd