Solaris getopt Vulnerability

Bugtraq ID:	203
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Unknown
Published:	Jan 26 1997 12:00AM
Updated:	Jan 26 1997 12:00AM
Credit:	This bug was originally found by Oliver Friedrichs (then of Secure Networks Inc.) and Mudge of L0pht Heavy Industries. Mudge posted their finding in a L0pht advisory on Jan 16, 1997.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Solaris getopt Vulnerability

The getopt (3) function parses options from a program's command list. A buffer overflow condition has been discovered that may allow a user to overwrite the internal stack space of programs that use getopt (3). Thus, any program that is dynamically or statically setuid or setgid program that uses getopt (3) may be vulnerable to this overflow condition.

Solaris getopt Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solaris getopt Vulnerability

References:

• L0pht Heavy Industries Advisories (L0pht Heavy Industries)
  
• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)