CVE-2002-1586

Published: Dec 3, 2002Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.

Affected (9)

Products: Sun: Solaris, Sunos

Sun

2 products

Solaris

Sunos

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Sun Solaris	Version 2.5.1
Sun Solaris	Version 2.6
Sun Solaris	Version 7.0
Sun Solaris	Version 8.0
Sun Solaris	Version 9.0
Sun Sunos	All versions
Sun Sunos	Version 5.5.1
Sun Sunos	Version 5.7
Sun Sunos	Version 5.8