The vulnerability in kcms_configure also exists in Solaris 2.6 and 2.7 sparc edition. Exploit included.