Sun Solaris CDE ToolTalk Set Default Session Memory Corruption Vulnerability

Bugtraq ID:	5598
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Aug 30 2002 12:00AM
Updated:	Aug 30 2002 12:00AM
Credit:	Vulnerability announced by Sun Microsystems.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0
Not Vulnerable:

Sun Solaris CDE ToolTalk Set Default Session Memory Corruption Vulnerability

A problem in the Common Desktop Environment (CDE) ToolTalk infrastructure has been discovered. This problem has been reported as affecting the Solaris operating system.

Under some circumstances, it may be possible to cause a core dump in ToolTalk. Under certain conditions, a program making use of the _Tt_c_procid::set_default_session function may cause a core dump within the program. It is currently unknown whether this is an exploitable issue.

Sun Solaris CDE ToolTalk Set Default Session Memory Corruption Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris CDE ToolTalk Set Default Session Memory Corruption Vulnerability

Solution:
Patches available:


Sun Solaris 8_x86

• Sun 110287-09
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 110286-09
  http://sunsolve.sun.com

Sun Solaris CDE ToolTalk Set Default Session Memory Corruption Vulnerability

References:

• 110286-08 (Sun Microsystems)