BID:10809

Sun Solaris 'ypbind' Unspecified Buffer Overflow Vulnerability

Info

Sun Solaris 'ypbind' Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	10809
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 21 2001 12:00AM
Updated:	Jun 21 2001 12:00AM
Credit:	Mark Dowd and Stephen James of IT Audit & Consulting disclosed this vulnerability.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86HW5/98 Sun Solaris 2.6_x86HW3/98 Sun Solaris 2.6_x86 Sun Solaris 2.6_sparc Sun Solaris 2.6 HW5/98 Sun Solaris 2.6 HW3/98 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4

Not Vulnerable:

Discussion

Sun Solaris 'ypbind' Unspecified Buffer Overflow Vulnerability

It is reported that 'ypbind' is susceptible to an unspecified remote buffer overflow vulnerability. This vulnerability exists due to insufficient boundary checks performed on user-supplied data.

'ypbind' runs with superuser privileges, therefor, remote code execution as the superuser is possible. It is also likely that a system-wide denial of service condition could be created by crashing the 'ypbind' process.

Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.

Versions of Solaris prior to Solaris 8 01/01, or Solaris 8 Maintenance Update 3 are reported vulnerable.

Exploit / POC

Sun Solaris 'ypbind' Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Sun Solaris 'ypbind' Unspecified Buffer Overflow Vulnerability

Solution:
Sun has released advisory #00203 addressing this issue. Please see the referenced advisory for further information on obtaining patches.

Sun Solaris 7.0