Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.
| Software | From | Fixed in |
|---|---|---|
| sun / sunos | 5.7 | 5.7.x |
| sun / sunos | 5.8 | 5.8.x |