BID:16193

Sun Solaris UUSTAT Local Buffer Overflow Vulnerability

Info

Sun Solaris UUSTAT Local Buffer Overflow Vulnerability

Bugtraq ID:	16193
Class:	Boundary Condition Error
CVE:	CVE-2004-0780
Remote:	No
Local:	Yes
Published:	Jan 10 2006 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Discovered by Angelo Rosiello.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Avaya Interactive Response 1.3 Avaya Interactive Response 1.2.1 Avaya Interactive Response Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 10.0 Avaya CMS Server 9.0

Not Vulnerable:

Discussion

Sun Solaris UUSTAT Local Buffer Overflow Vulnerability

Sun Solaris 'uustat' utility is prone to a local buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code and gain 'uucp' user privileges that correspond to user ID 5 by default.

Exploit / POC

Sun Solaris UUSTAT Local Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Sun Solaris UUSTAT Local Buffer Overflow Vulnerability

Solution:
Sun has released an advisory (Sun Alert ID: 101933) and patches to address this issue.

Please see the referenced vendor advisories for further information.

Sun Solaris 8_x86

Sun 111571-04
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -111571-04-1

Sun Solaris 8_sparc

Sun 111570-04
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -111570-04-1

Sun Solaris 9

Sun 113322-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113322-03-1

Sun Solaris 9_x86

Sun 115880-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -115880-02-1

References

Sun Solaris UUSTAT Local Buffer Overflow Vulnerability

References: