Sun Solaris Volume Manager Local Buffer Overflow Vulnerability

Bugtraq ID:	5207
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 11 2002 12:00AM
Updated:	Jul 11 2002 12:00AM
Credit:	Vulnerability announced by Sun Microsystems.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris Volume Manager Local Buffer Overflow Vulnerability

Solaris is the freely available Unix operating system distributed by Sun Microsystems.

Under some circumstances, a buffer overflow may occur in the Solaris Volume Manager (vold). A local user may be able to take advantage of this buffer overflow, exploiting it to overwrite stack memory, and potentially execute arbitrary code. Any code executed via this vulnerability would be executed with the privileges of the volume management daemon, typically run as root.

Sun Solaris Volume Manager Local Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris Volume Manager Local Buffer Overflow Vulnerability

Solution:
Fixes available.


Sun Solaris 2.6

• Sun 107618-04
  http://sunsolve.sun.com

Sun Solaris 7.0

• Sun 107259-04
  http://sunsolve.sun.com

Sun Solaris 8_x86

• Sun 108969-07
  http://sunsolve.sun.com

Sun Solaris 2.6_x86

• Sun 107619-04
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 108968-07
  http://sunsolve.sun.com

Sun Solaris 7.0_x86

• Sun 107260-04
  http://sunsolve.sun.com

Sun Solaris 2.5.1 _x86

• Sun 104011-02
  http://sunsolve.sun.com

Sun Solaris 2.5.1

• Sun 104010-02
  http://sunsolve.sun.com