Sun Solaris RMFormat Unspecified Buffer Overflow Vulnerabilities

Bugtraq ID:	13719
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 21 2000 12:00AM
Updated:	Jul 21 2000 12:00AM
Credit:	These issues were announced by Sun.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris RMFormat Unspecified Buffer Overflow Vulnerabilities

The Sun Solaris rmformat utility (/usr/bin/rmformat) is prone to multiple unspecified buffer overflow vulnerabilities. Sun has not released specific information about these vulnerabilities, however, it is believed that successful exploitation will allow execution of code with elevated privileges.

Sun has described these issues as "4322206 /usr/bin/rmformat has potential buffer overflows".

Sun Solaris RMFormat Unspecified Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris RMFormat Unspecified Buffer Overflow Vulnerabilities

Solution:
Sun has released patches to address these issues.


Sun Solaris 8_x86

• Sun 108976-02
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -108976-02-1

Sun Solaris 8_sparc

• Sun 108975-02
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -108975-02-1

Sun Solaris RMFormat Unspecified Buffer Overflow Vulnerabilities

References:

• Patch 108975-02 SunOS 5.8: /usr/bin/rmformat and /usr/sbin/format patch (Sun)
  
• Patch 108976-02 SunOS 5.8_x86: /usr/bin/rmformat and /usr/sbin/format patch (Sun)