Info

Disclosure

Mar 14, 2001

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in the snmpXdmid RPC service on Solaris. The snmpXdmid service fails to check the length of an incoming buffer resulting in a stack overflow. With a specially crafted request, an attacker can execute arbitrary code and obtain root access.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Commercial
Disclosure: OSVDB Verified, Uncoordinated Disclosure, Discovered in the Wild

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Sun Microsystems has released a patch to address this vulnerability.

Products

Sun Microsystems, Inc.	Solaris	7
		8

References

CVE ID: 2001-0236 (see also: NVD)
Bugtraq ID: 2417
ISS X-Force ID: 6245
CERT VU: 648304
CERT: CA-2001-05
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2001-03/0175.html
Generic Exploit URL: http://immunitysec.com
http://www.saintcorporation.com/cgi-bin/exploit_info/solaris_snmpxdmid
Vendor Specific Advisory URL: http://sunsolve.sun.com/search/document.do?assetkey=1-22-00207-1
CIAC Advisory: l-065

Credit

Job de Haas - jobitsx.com - ITSX bv

Direct URL: http://osvdb.org/546

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Sun Microsystems, Inc.

Solaris

References

Credit