PT-2003-2024 · Oracle · Solaris

Published 2003-06-19 · Updated 2018-10-30 · CVE-2003-1067

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Solaris versions 2.6 through 9

Description The issue concerns multiple buffer overflows in certain functions used in Solaris, which can be exploited by local users to gain root privileges. This can be achieved by providing long arguments to affected programs, such as Xsun, that utilize these functions.

Recommendations For Solaris versions 2.6 through 9, update to a version that includes fixes for the buffer overflows in the dbm open and dbminit functions to prevent local users from gaining root privileges.

Fix

Related Identifiers

CVE-2003-1067

Affected Products

Solaris

References · 8

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1067 · Security Note
• http://ciac.org/ciac/bulletins/n-108.shtml · Vendor Advisory
• http://securityfocus.com/bid/7991 · Vendor Advisory
• http://secunia.com/advisories/9088 · Vendor Advisory
• http://securityfocus.com/bid/64758 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12379 · Note
• http://oracle.com/technetwork/topics/security/cpujan2014-1972949.html · Note