Solaris libvolmgt.so.1 (volume management, eject, fdformat) Vulnerability

Bugtraq ID:	200
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 05 1997 12:00AM
Updated:	Apr 05 1997 12:00AM
Credit:	This bug was first posted to the Bugtraq mailing list by Cristian SCHIPOR ([email protected]) on Thu, 13 Mar 1997.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Solaris libvolmgt.so.1 (volume management, eject, fdformat) Vulnerability

A buffer overflow condition has been discovered in the volume management library, libvolmgt.so.1. The following programs use libvolmgt.so.1 and may allow an unauthorized user to gain root access if by exploiting the aforementioned overflow condition.eject used to eject removable media that may not have a physical eject button.fddformat formats diskettes and PCMCIA memory cards.

Solaris libvolmgt.so.1 (volume management, eject, fdformat) Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.4_x86

• Sun 101908-14
  x86
  

Sun Solaris 2.5

• Sun 103024-02
  sparc
  

Sun Solaris 2.3

• Sun 101331-07
  sparc
  

Sun Solaris 2.5_x86

• Sun 103044-02
  x86
  

Sun Solaris 2.4

• Sun 101907-14
  sparc
  

Sun Solaris 2.5.1 _x86

• Sun 104777-01
  x86
  

Sun Solaris 2.5.1

• Sun 104776-01
  sparc
  

Solaris libvolmgt.so.1 (volume management, eject, fdformat) Vulnerability

References:

• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)