Sun Solaris JServer Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	13731
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 17 2000 12:00AM
Updated:	Aug 17 2000 12:00AM
Credit:	This issue was announced by Sun.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris JServer Unspecified Buffer Overflow Vulnerability

Sun Solaris jserver is prone to an unspecified buffer overflow vulnerability. This vulnerability could theoretically let an attacker execute arbitrary code with elevated privileges.

Sun describes this issue as "4352777 jserver buffer overflow".

Sun Solaris JServer Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris JServer Unspecified Buffer Overflow Vulnerability

Solution:
Sun has released patches to address this vulnerability.


Sun Solaris 2.6

• Sun 108333-02
  http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-21-108333-0 2-1

Sun Solaris 8_x86

• Sun 109952-01
  http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-21-109952-0 1-1

Sun Solaris 2.6_x86

• Sun 108334-02
  http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-21-108334-0 2-1

Sun Solaris 8_sparc

• Sun 109951-01
  http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-21-109951-0 1-1

Sun Solaris JServer Unspecified Buffer Overflow Vulnerability

References:

• Patch 108333-02 SunOS 5.6: jserver buffer overflow (Sun)
  
• Patch 108334-02 SunOS 5.6_x86: jserver buffer overflow (Sun)
  
• Patch 109951-01 SunOS 5.8: jserver buffer overflow (Sun)
  
• Patch 109952-01 SunOS 5.8_x86: jserver buffer overflow (Sun)