MacOS X Sliplogin Buffer Overflow Vulnerability

Bugtraq ID:	4769
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	May 18 2002 12:00AM
Updated:	May 18 2002 12:00AM
Credit:	Credited to Kevin Finisterre.
Vulnerable:	Apple Mac OS X 10.1.3
Not Vulnerable:

MacOS X Sliplogin Buffer Overflow Vulnerability

The sliplogin utility is part of MacOS X. It has been reported that a buffer overflow condition occurs when the sliplogin utility is executed and is supplied with an excessively long argument.

The utility is reportedly configured as setuid root. It is possible to overflow the buffer of this utility by supplying an excessively long argument.

MacOS X Sliplogin Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MacOS X Sliplogin Buffer Overflow Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MacOS X Sliplogin Buffer Overflow Vulnerability

References:

• 'sliplogin' Serial Line IP Utility Buffer Overflow May Possibly Allow Local User (Security Tracker)