CVE-2004-0481: Sun Solaris

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.

Affected products

• Sun Solaris: version 8.0 only; version 9.0 only
• Sun Sunos: version 5.8 only

Published 2005-02-23. Last modified 2026-06-16.