BID:4624

Solaris admintool Local Buffer Overflow Vulnerability

Info

Solaris admintool Local Buffer Overflow Vulnerability

Bugtraq ID:	4624
Class:	Boundary Condition Error
CVE:	CVE-2002-0089
Remote:	No
Local:	Yes
Published:	Apr 29 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovered by Kevin Kotas.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5

Not Vulnerable:

Discussion

Solaris admintool Local Buffer Overflow Vulnerability

The Solaris admintool utility allows a user to perform a number of administrative tasks through a graphical interface.

A buffer overflow vulnerability exists in the admintool binary which may allow a local user to gain elevated privileges. admintool is world executable and suid root in the default installation.

Exploit / POC

Solaris admintool Local Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.