Solaris lpstat Buffer Overflow Vulnerability
BID:7239
Info
Solaris lpstat Buffer Overflow Vulnerability
| Bugtraq ID: | 7239 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0091 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 31 2003 12:00AM |
| Updated: | Jul 11 2009 09:06PM |
| Credit: | Discovered by NSFOCUS. |
| Vulnerable: |
Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 |
| Not Vulnerable: |
Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc |
Discussion
Solaris lpstat Buffer Overflow Vulnerability
The lpstat utility is used to display the contents of the print queue. It has been reported that the version of lpstat shipped with Sun Solaris is vulnerable to a locally exploitable buffer overflow. As lpstat for Solaris is configured setuid root, exploitation of this vulnerability could result in elevation of privileges for a local attacker.
The lpstat utility is used to display the contents of the print queue. It has been reported that the version of lpstat shipped with Sun Solaris is vulnerable to a locally exploitable buffer overflow. As lpstat for Solaris is configured setuid root, exploitation of this vulnerability could result in elevation of privileges for a local attacker.
References
Solaris lpstat Buffer Overflow Vulnerability
References:
References:
- 52443 (Sun Microsystems)
- Sun Patch Access Page (Sun Microsystems)