BID:6665

Kodak KCMS KCS_OPEN_PROFILE Procedure Arbitrary File Access Vulnerability

Info

Kodak KCMS KCS_OPEN_PROFILE Procedure Arbitrary File Access Vulnerability

Bugtraq ID:	6665
Class:	Input Validation Error
CVE:	CVE-2003-0027
Remote:	Yes
Local:	No
Published:	Jan 22 2003 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	Vulnerability discovery credited to Entercept Security Techonologies.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Not Vulnerable:

Discussion

Kodak KCMS KCS_OPEN_PROFILE Procedure Arbitrary File Access Vulnerability

It has been reported that a problem exists in the Kodak Color Management System (KCMS) due to the insecure handling of input. It may be possible for a remote user to gain access to arbitrary files on a vulnerable host. This could allow remote information gathering, leakage of sensitive information, and potentially privilege elevation.