Sun Solaris snmpdx Format String Vulnerability

Bugtraq ID:	4932
Class:	Input Validation Error
CVE:	CVE-2002-0796
Remote:	Yes
Local:	No
Published:	Jun 04 2002 12:00AM
Updated:	Jul 11 2009 01:56PM
Credit:	Credited to Sinan Eren of Entercept Security Technologies' Ricochet Team.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris snmpdx Format String Vulnerability

A format string vulnerability has been identified in snmpdx. It is believed that data from within SNMP messages is used as, or as part of, the format string argument in printf* functions. This results in a potentially exploitable condition.

Sun Solaris snmpdx Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris snmpdx Format String Vulnerability

Solution:
Sun has released fixes:


Sun Solaris 7.0_x86

• Sun 107710-19
  

Sun Solaris 2.6

• Sun 106787-18
  

Sun Solaris 7.0

• Sun 107709-19
  

Sun Solaris 8_x86

• Sun 108870-16
  

Sun Solaris 2.6_x86

• Sun 106787-18
  


• Sun 106872-18
  

Sun Solaris 8_sparc

• Sun 108869-16
  

Sun Solaris snmpdx Format String Vulnerability

References: