Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Solaris | Sun | 2.5 (including) | 2.5 (including) |
| Solaris | Sun | 2.5.1 (including) | 2.5.1 (including) |
| Solaris | Sun | 2.6 (including) | 2.6 (including) |
| Solaris | Sun | 7.0 (including) | 7.0 (including) |
| Solaris | Sun | 8.0 (including) | 8.0 (including) |
| Sunos | Sun | - (including) | - (including) |
| Sunos | Sun | 5.5 (including) | 5.5 (including) |
| Sunos | Sun | 5.5.1 (including) | 5.5.1 (including) |
| Sunos | Sun | 5.7 (including) | 5.7 (including) |
| Sunos | Sun | 5.8 (including) | 5.8 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html
- http://www.securityfocus.com/bid/2935
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6802
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html
- http://www.securityfocus.com/bid/2935
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6802
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47