PT-2003-2024 · Oracle · Solaris

Publicado 2003-06-19 · Atualizado 2018-10-30 · CVE-2003-1067

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Solaris versions 2.6 through 9

Description The issue concerns multiple buffer overflows in certain functions used in Solaris, which can be exploited by local users to gain root privileges. This can be achieved by providing long arguments to affected programs, such as Xsun, that utilize these functions.

Recommendations For Solaris versions 2.6 through 9, update to a version that includes fixes for the buffer overflows in the dbm open and dbminit functions to prevent local users from gaining root privileges.

Correção

Identificadores relacionados

CVE-2003-1067

Produtos afetados

Solaris

Referências · 8

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1067 · Nota de Segurança
• http://ciac.org/ciac/bulletins/n-108.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/64758 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12379 · Nota
• http://securityfocus.com/bid/7991 · Aviso do Fabricante
• http://secunia.com/advisories/9088 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpujan2014-1972949.html · Nota