Sun Solaris UTMP_Update Local Buffer Overflow Vulnerability

Bugtraq ID:	6639
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 17 2003 12:00AM
Updated:	Jan 17 2003 12:00AM
Credit:	Vulnerability announced by Sun Microsystems.
Vulnerable:	Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris UTMP_Update Local Buffer Overflow Vulnerability

It has been reported that a problem in the Solaris utmp_update binary exists. Due to insufficient bounds checking, it may be possible to launch a buffer overflow attack through this program. This could lead to a local attacker gaining elevated privileges.

Sun Solaris UTMP_Update Local Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris UTMP_Update Local Buffer Overflow Vulnerability

Solution:
Sun has made fixes available:


Sun Solaris 7.0_x86

• Sun 113753-01
  http://sunsolve.sun.com

Sun Solaris 2.6

• Sun 113754-01
  http://sunsolve.sun.com

Sun Solaris 7.0

• Sun 113752-01
  http://sunsolve.sun.com

Sun Solaris 8_x86

• Sun 113651-01
  http://sunsolve.sun.com

Sun Solaris 2.6_x86

• Sun 113755-01
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 113650-01
  http://sunsolve.sun.com

Sun Solaris 9

• Sun 113718-01
  http://sunsolve.sun.com