VYPR

KCMS

by Sun Corporation

CVEs (2)

  • CVE-2003-0027Feb 7, 2003
    risk 0.05cvss epss 0.26

    Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.

  • CVE-2004-0481Feb 23, 2005
    risk 0.00cvss epss 0.00

    The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.