Sun Solstice X.25 snmpx25d Buffer Overflow Vulnerability
BID:8882
Info
Sun Solstice X.25 snmpx25d Buffer Overflow Vulnerability
| Bugtraq ID: | 8882 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 24 2003 12:00AM |
| Updated: | Oct 24 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to the vendor. |
| Vulnerable: |
Sun Solstice X.25 9.2 Sun Solstice X.25 9.1 |
| Not Vulnerable: | |
Discussion
Sun Solstice X.25 snmpx25d Buffer Overflow Vulnerability
It has been reported that Sun Solstice X.25 may be prone to a buffer overflow vulnerability due to insufficient boundary checking by snmpx25d daemon. An attacker may leverage the issue by exploiting an unbounded memory copy operation to overwrite the saved return address/base pointer, causing the affected procedure to return to an address of their choice.
Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the daemon in order to gain unauthorized access to a vulnerable system.
This issue is related to previously released BIDs 4088 and 4089.
Sun Solstice X.25 version 9.2 and prior have been reported to be prone to this issue, however other versions may be vulnerable as well.
It has been reported that Sun Solstice X.25 may be prone to a buffer overflow vulnerability due to insufficient boundary checking by snmpx25d daemon. An attacker may leverage the issue by exploiting an unbounded memory copy operation to overwrite the saved return address/base pointer, causing the affected procedure to return to an address of their choice.
Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the daemon in order to gain unauthorized access to a vulnerable system.
This issue is related to previously released BIDs 4088 and 4089.
Sun Solstice X.25 version 9.2 and prior have been reported to be prone to this issue, however other versions may be vulnerable as well.
Exploit / POC
Sun Solstice X.25 snmpx25d Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Solstice X.25 snmpx25d Buffer Overflow Vulnerability
Solution:
Sun has released an advisory Sun(sm) Alert Notification 57404. Please see references for more information.
Solution:
Sun has released an advisory Sun(sm) Alert Notification 57404. Please see references for more information.