CVE-2002-1871

CVE-2002-1871 describes a privilege escalation vulnerability in the pkgadd utility within Sun Solaris versions 2.5.1 through 8. This flaw allows attackers to elevate privileges by exploiting a weakness where pkgadd installs files with setuid/setgid root permissions if the pkgmap file contains a "?" in the mode, owner, or group fields. With a CVSS score of 7.2, this vulnerability is considered high severity, indicating that a local attacker with low complexity could achieve complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.