SCO UnixWare UIDAdmin Local Buffer Overflow Vulnerability

Bugtraq ID:	15811
Class:	Boundary Condition Error
CVE:	CVE-2005-3903
Remote:	No
Local:	Yes
Published:	Dec 12 2005 12:00AM
Updated:	Feb 07 2006 08:55PM
Credit:	Discovery is credited to iDEFENSE Labs.
Vulnerable:	SCO Unixware 7.1.4 SCO Unixware 7.1.3 Avaya Intuity Audix R5 0
Not Vulnerable:

SCO UnixWare UIDAdmin Local Buffer Overflow Vulnerability

SCO UnixWare is prone to a local buffer-overflow vulnerability.

The vulnerability presents itself when the application processes excessive data supplied to the 'uidadmin' utility.

UnixWare 7.1.3 and UnixWare 7.1.4 are affected by this issue. Previous versions may also be affected.

SCO UnixWare UIDAdmin Local Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SCO UnixWare UIDAdmin Local Buffer Overflow Vulnerability

Solution:

Please see the referenced advisories for further information:

- SCO has released advisory SCOSA-2005.54 to address this issue.
- Avaya has released advisory ASA-2006-034 detailing affected Avaya products.

SCO UnixWare UIDAdmin Local Buffer Overflow Vulnerability

References:

• ASA-2006-034 - uidadmin Buffer Overflow (SCOSA-2005.54) (Avaya)
  
• SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability (iDEFENSE)
  
• Vendor Homepage (SCO)
  
• iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme ("[email protected]" )