Oracle Solaris CDE Calendar Manager Service Daemon Remote Buffer Overflow Vulnerability
BID:45853
Info
Oracle Solaris CDE Calendar Manager Service Daemon Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 45853 |
| Class: | Unknown |
| CVE: |
CVE-2010-4435 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 18 2011 12:00AM |
| Updated: | Feb 08 2011 07:50PM |
| Credit: | Rodrigo Rubira Branco (BSDaemon) |
| Vulnerable: |
Sun Solaris 9_x86 Update 5 Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 9.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 8.2 Sun Solaris 8.1 Sun Solaris 10_x86 Sun Solaris 10_sparc Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Avaya CMS Server 16.2 Avaya CMS Server 16.1 Avaya CMS Server 16.0 Avaya CMS Server 15.0 |
| Not Vulnerable: | |
Discussion
Oracle Solaris CDE Calendar Manager Service Daemon Remote Buffer Overflow Vulnerability
Oracle Solaris is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. This issue affects the CDE Calendar Manager Remote Procedure Call (RPC) service ('rpc.cmsd').
Remote attackers can exploit this issue to execute arbitrary code with superuser privileges, which can result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition.
This vulnerability affects the following supported versions:
8, 9, 10
Oracle Solaris is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. This issue affects the CDE Calendar Manager Remote Procedure Call (RPC) service ('rpc.cmsd').
Remote attackers can exploit this issue to execute arbitrary code with superuser privileges, which can result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition.
This vulnerability affects the following supported versions:
8, 9, 10
Exploit / POC
Oracle Solaris CDE Calendar Manager Service Daemon Remote Buffer Overflow Vulnerability
Exploit code is available for a related issue for IBM AIX; see BID 36615 (IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability) for more information.
The following proof-of-concept is available:
Exploit code is available for a related issue for IBM AIX; see BID 36615 (IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability) for more information.
The following proof-of-concept is available:
Solution / Fix
Oracle Solaris CDE Calendar Manager Service Daemon Remote Buffer Overflow Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
Oracle Solaris CDE Calendar Manager Service Daemon Remote Buffer Overflow Vulnerability
References:
References:
- ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution (ZDI Disclosures
- ASA-2011-013 CVE-2010-4435 CDE Calendar Manager Service RPC Vulnerability (Avaya)
- Oracle Critical Patch Update Advisory - January 2011 (Oracle)
- ZDI-11-062 Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vu (Zero Day Initiative)