PT-2023-19374 · Oracle · Solaris 10

Marco Ivaldi · Published 2023-01-21 · Updated 2024-08-02 · CVE-2023-24040

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Common Desktop Environment version 1.6

Description The issue is related to a bug in the parser of lpstat, an external command invoked by dtprintinfo, which occurs during the listing of available printer names. This bug allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file, enabling them to manipulate control flow and disclose memory contents on Solaris 10 systems. It's noted that this vulnerability only affects products that are no longer supported by the maintainer.

Recommendations For Common Desktop Environment version 1.6, as the product is no longer supported by the maintainer, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2023-24040

Affected Products

Solaris 10

References · 8

• 🔥 https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt · Exploit
• 🔥 https://security.humanativaspa.it/nothing-new-under-the-sun · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-24040 · Security Note
• https://osv.dev/vulnerability/CVE-2023-24040 · Vendor Advisory
• https://t.me/cvenotify/88504 · Telegram Post
• https://t.me/cvenotify/42622 · Telegram Post
• http://seclists.org/fulldisclosure/2023/Jan/24 · Note
• https://t.me/cvenotify/85160 · Telegram Post