CVE-2011-0902

Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable.

Affected products

Sunos, Sunscreen Firewall

Oracle Sun Microsystems Sunscreen Firewall

All versions

CVSS 2.0

6.9 MEDIUM

EPSS

1.5% (73th percentile)

NVD status

Modified

Published

2011-02-07