Solaris dtmail Vulnerability

Bugtraq ID:	175
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Unknown
Published:	Dec 17 1998 12:00AM
Updated:	Dec 17 1998 12:00AM
Credit:	This vulnerability was released to the public by Sun Microsystems as Sun Bulletin 00181 on December 17, 1998.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4
Not Vulnerable:

Solaris dtmail Vulnerability

Dtmail is a mail user agent (MUA) for the Common Desktop Environment (CDE). Several buffer overflow conditions have been found related to the way dtmail handles attachments. Thus, an unauthorized user may be able to exploit vulnerabilities in dtmail to execute arbitrary commands with the privileges of mail and that of the user reading the tainted email.

Solaris dtmail Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solaris dtmail Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.6

• Sun 105338-14
  sparc
  

Sun Solaris 2.6_x86

• Sun 105339-12
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-105339-12-1

Sun Solaris 2.5

• Sun 106920-01
  sparc
  

Sun Solaris 2.5_x86

• Sun 106921-01
  x86
  

Sun Solaris 2.5.1 _x86

• Sun 104185-03
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104185-03-1

Sun Solaris 2.5.1

• Sun 104178-03
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104178-03-1

Solaris dtmail Vulnerability

References: