Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability

Bugtraq ID:	219
Class:	Boundary Condition Error
CVE:
Remote:	Unknown
Local:	Yes
Published:	Jun 29 1997 12:00AM
Updated:	Jun 29 1997 12:00AM
Credit:	This vulnerability was originally released as Sun Security Bulletin 0148.
Vulnerable:	Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:

Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability

NIS+ is a network-wide name service that can be selected via the /etc/nsswitch.conf file. A buffer overflow condition exists in nss_nisplus.so.1 that may allow an unauthorized user to gain root access via any setuid root program linked to nss_nisplus.so.1.

Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.3

• Sun 101736-04
  sparc
  

Sun Solaris 2.4_x86

• Sun 102278-03
  x86
  

Sun Solaris 2.4

• Sun 102277-03
  sparc
  

Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability

References:

• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)