Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

Solaris kernel lets local user load modules for extra rights

CVE-2004-1767 · published 21 years ago
Summary

On Solaris versions 2.6, 7, 8, and 9, a regular user can load their own kernel code and gain higher system privileges. This can let an attacker take control of the machine or access data they should not see. Install the latest security updates from Sun or upgrade to a newer Solaris release, and restrict who can use the module‑loading command.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sun solaris 2.6
7.0
8.0
9.0
cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
sun sunos 5.7
5.8
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
Original advisory text
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published31 Dec 2004
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2004-1767 · NVD
Track software like this
Free during beta