Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability
BID:5085
Info
Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability
| Bugtraq ID: | 5085 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 22 2002 12:00AM |
| Updated: | Jun 22 2002 12:00AM |
| Credit: | Vulnerability discovery credited to alex medvedev <[email protected]>. |
| Vulnerable: |
Sun Solaris 9 |
| Not Vulnerable: | |
Discussion
Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability
It has been reported that a memory corruption issue exists in rcp. By executing rcp on a local system with excessively long command-line arguments, a user may produce a segmentation fault. An attacker must execute rcp with 10000 bytes the fields for the file name, destination host name, and destination file name each. As rcp is a setuid root executable, it may be possible to gain elevated privileges.
It has been reported that a memory corruption issue exists in rcp. By executing rcp on a local system with excessively long command-line arguments, a user may produce a segmentation fault. An attacker must execute rcp with 10000 bytes the fields for the file name, destination host name, and destination file name each. As rcp is a setuid root executable, it may be possible to gain elevated privileges.
Exploit / POC
Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability
References:
References: