Solaris AdminTool Media Installation Path Buffer Overflow Vulnerability

Bugtraq ID:	4632
Class:	Boundary Condition Error
CVE:	CVE-2002-0088
Remote:	No
Local:	Yes
Published:	Apr 29 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovery of this issue is credited to Kevin Kotas of the eSecurityOnline Research and Development Team.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Solaris AdminTool Media Installation Path Buffer Overflow Vulnerability

The Solaris admintool is a graphical user interface for performing administrative tasks.

admintool is prone to a locally exploitable buffer overflow condition. This is due to a lack of sufficient bounds checking of the media installation path.

Successful exploitation will enable an attacker to execute arbitrary attacker-supplied instructions and as a consequence gain elevated privileges.

Solaris AdminTool Media Installation Path Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solaris AdminTool Media Installation Path Buffer Overflow Vulnerability

Solution:
Sun has made the following fixes available:


Sun Solaris 2.6

• Sun 105800-08
  http://sunsolve.sun.com

Sun Solaris 7.0

• Sun 108721-05
  http://sunsolve.sun.com

Sun Solaris 8_x86

• Sun 110454-04
  http://sunsolve.sun.com

Sun Solaris 2.6_x86

• Sun 105801-08
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 110453-04
  http://sunsolve.sun.com

Sun Solaris 7.0_x86

• Sun 108722-05
  http://sunsolve.sun.com

Solaris AdminTool Media Installation Path Buffer Overflow Vulnerability

References:

• 44541 (Sun Microsystems)