BID:4631

Solaris cachefsd Buffer Overrun Vulnerability

Info

Solaris cachefsd Buffer Overrun Vulnerability

Bugtraq ID:	4631
Class:	Boundary Condition Error
CVE:	CVE-2002-0084
Remote:	No
Local:	Yes
Published:	Apr 29 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovered by Kevin Kotas.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Not Vulnerable:

Discussion

Solaris cachefsd Buffer Overrun Vulnerability

The Cache File System is a file system caching mechanism developed by Sun that improves NFS performance and scalability. It is shipped by default with the Solaris operating environment.

A buffer overrun exists in cachefsd that may allow for local attackers to obtain root privileges. The overrun is due to insufficient bounds checking on user-supplied mounts.

Successful exploitation may result in a compromise of the system.

Exploit / POC

Solaris cachefsd Buffer Overrun Vulnerability

CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.