Caldera OpenServer CPU Status Utilities Buffer Overflow Vulnerability
BID:643
Info
Caldera OpenServer CPU Status Utilities Buffer Overflow Vulnerability
| Bugtraq ID: | 643 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-1999-1571 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 09 1999 12:00AM |
| Updated: | Jul 11 2009 12:56AM |
| Credit: | First posted to Bugtraq by Brock Tellier <[email protected]> on September 9, 1999. |
| Vulnerable: |
SCO Open Server 5.0.5 Caldera OpenServer 5.0.5 |
| Not Vulnerable: | |
Discussion
Caldera OpenServer CPU Status Utilities Buffer Overflow Vulnerability
Caldera OpenServer includes a set of utilities to report CPU usage status information. The utilities are sar, mpsar, cpusar and sadc. They are installed setuid mem by default.
These utilities are susceptible to a buffer overflow related to processing of the argument to the '-o' command-line option. This condition may be exploited by local attackers to obtain effective userid mem privileges.
Caldera OpenServer includes a set of utilities to report CPU usage status information. The utilities are sar, mpsar, cpusar and sadc. They are installed setuid mem by default.
These utilities are susceptible to a buffer overflow related to processing of the argument to the '-o' command-line option. This condition may be exploited by local attackers to obtain effective userid mem privileges.
Solution / Fix
Caldera OpenServer CPU Status Utilities Buffer Overflow Vulnerability
Caldera OpenServer 5.0.5
Caldera OpenServer 5.0.5
-
Caldera VOL.000.000
ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/VOL.0 00.000
References
Caldera OpenServer CPU Status Utilities Buffer Overflow Vulnerability
References:
References:
- SCO Homepage (Santa Cruz Operaton)