Sun Solaris Multiple libc Numeric Conversion Functions Buffer Overflow Vulnerability

Bugtraq ID:	40329
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	May 21 2010 12:00AM
Updated:	May 21 2010 12:00AM
Credit:	Maksymilian Arciemowicz
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solaris Multiple libc Numeric Conversion Functions Buffer Overflow Vulnerability

Sun Solaris is prone to a buffer-overflow vulnerability affecting multiple functions in the libc library.

Attackers may exploit this issue to execute arbitrary code within the context of affected applications.

Solaris 10 is affected; other versions may also be vulnerable.

Sun Solaris Multiple libc Numeric Conversion Functions Buffer Overflow Vulnerability

The following proofs of concept are available:

• /data/vulnerabilities/exploits/40329-1.c
• /data/vulnerabilities/exploits/40329-2.c
• /data/vulnerabilities/exploits/40329-3.pl

Sun Solaris Multiple libc Numeric Conversion Functions Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris Multiple libc Numeric Conversion Functions Buffer Overflow Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• Sun Solaris 10 libc/*convert (*cvt) buffer overflow (Maksymilian Arciemowicz)