CVE-2004-1394: Sun Solaris

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.

Affected products

• Sun Solaris: version 9.0 only
• Sun Sunos: version 5.8 only

Published 2004-12-31. Last modified 2026-06-16.