Solaris rpc.nisd Vulnerability

Bugtraq ID:	677
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jun 10 1998 12:00AM
Updated:	Jun 10 1998 12:00AM
Credit:	This vulnerability was discovered by Josh Daymont <[email protected]>.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3 Fujitsu UXP/V V10L20
Not Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0

Solaris rpc.nisd Vulnerability

Due to insufficient bounds checking in the NIS service daemon rpc.nisd, a remote user can overwrite the stack space. This could lead to crashing of the service daemon or execution of arbitrary code on the machine running the service daemon, leading to compromise of the system.

Solaris rpc.nisd Vulnerability

x

Solaris rpc.nisd Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.6

• Sun 105401-01
  sparc
  

Sun Solaris 2.4_x86

• Sun 101974-01
  sparc
  

Sun Solaris 2.6_x86

• Sun 105402-01
  x86
  

Sun Solaris 2.5

• Sun 103187-01
  sparc
  

Sun Solaris 2.3

• Sun 101318-01
  sparc
  

Sun Solaris 2.5_x86

• Sun 103188-01
  x86
  

Sun Solaris 2.4

• Sun 101973-01
  sparc
  

Sun Solaris 2.5.1 _x86

• Sun 103613-01
  x86
  

Sun Solaris 2.5.1

• Sun 103612-01
  sparc