Sun XView Library Buffer Overflow Vulnerability

Bugtraq ID:	5479
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 15 2002 12:00AM
Updated:	Aug 15 2002 12:00AM
Credit:	Vulnerability announced by Sun Microsystems.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5 Sun Solaris 2.4
Not Vulnerable:

Sun XView Library Buffer Overflow Vulnerability

XView is a a component of X. It is available for various Unix and Linux operating systems.

A buffer overflow exists in the XView library. This library could make it possible for a local user to execute arbitrary code via linked executables. Exploitation of this vulnerability may lead to elevated local privileges.

Sun XView Library Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun XView Library Buffer Overflow Vulnerability

Solution:
Patches have been released to address this issue:


Sun Solaris 2.6

• Sun 106331-05
  http://sunsolve.sun.com

Sun Solaris 7.0

• Sun 107374-02
  http://sunsolve.sun.com

Sun Solaris 8_x86

• Sun 111627-01
  http://sunsolve.sun.com

Sun Solaris 2.6_x86

• Sun 106353-05
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 111626-01
  http://sunsolve.sun.com

Sun Solaris 7.0_x86

• Sun 107375-02
  http://sunsolve.sun.com

Sun XView Library Buffer Overflow Vulnerability

References:

• 27513 (Sun Microsystems)