Sun Solaris mibiisa Remote Buffer Overflow Vulnerability

Bugtraq ID:	4933
Class:	Boundary Condition Error
CVE:	CVE-2002-0797
Remote:	Yes
Local:	No
Published:	Jun 04 2002 12:00AM
Updated:	Jul 11 2009 01:56PM
Credit:	Credited to Sinan Eren of Entercept Security Technologies' Ricochet Team.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris mibiisa Remote Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in mibiisa. The vulnerability is due to an unsafe memory copy operation. Packet fields of excessive length relayed to mibiisa may corrupt the process stack. An attacker may craft a request to overwrite the return address of the affected stack frame with an arbitrary value.

Sun Solaris mibiisa Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris mibiisa Remote Buffer Overflow Vulnerability

Solution:
Sun has released fixes:


Sun Solaris 7.0_x86

• Sun 107710-19
  

Sun Solaris 2.6

• Sun 106787-18
  

Sun Solaris 7.0

• Sun 107709-19
  

Sun Solaris 8_x86

• Sun 108870-16
  

Sun Solaris 2.6_x86

• Sun 106787-18
  


• Sun 106872-18
  

Sun Solaris 8_sparc

• Sun 108869-16
  

Sun Solaris mibiisa Remote Buffer Overflow Vulnerability

References: