IRIX -xrm Buffer Overflow Vulnerability
BID:334
Info
IRIX -xrm Buffer Overflow Vulnerability
| Bugtraq ID: | 334 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 27 1997 12:00AM |
| Updated: | May 27 1997 12:00AM |
| Credit: | An exploit for this vulnerability was written by David Hedley <[email protected]> on May 27, 1997 to the Bugtraq mailing list. |
| Vulnerable: |
SGI IRIX 6.3 SGI IRIX 6.2 SGI IRIX 5.3 |
| Not Vulnerable: | |
Discussion
IRIX -xrm Buffer Overflow Vulnerability
A vulnerability exists in the X libraries as supplied with Silicon Graphics IRIX operating system. By placing a carefully constructed buffer as the argument to the -xrm option, an attacker can execute arbitrary code.
A vulnerability exists in the X libraries as supplied with Silicon Graphics IRIX operating system. By placing a carefully constructed buffer as the argument to the -xrm option, an attacker can execute arbitrary code.
Exploit / POC
Solution / Fix
IRIX -xrm Buffer Overflow Vulnerability
Solution:
Setuid bits can temporarily be removed from affected programs. A more suitable solution may be to wrap these applications. Software to do this is available at:
ftp://ftp.auscert.org.au/pub/auscert/tools/overflow_wrapper/overflow_wrapper.c
Patches are available from SGI at http://support.sgi.com
Solution:
Setuid bits can temporarily be removed from affected programs. A more suitable solution may be to wrap these applications. Software to do this is available at:
ftp://ftp.auscert.org.au/pub/auscert/tools/overflow_wrapper/overflow_wrapper.c
Patches are available from SGI at http://support.sgi.com