OSVDB ID: 8722

Title: Solaris ld.so.1 LD_PRELOAD Variable Local Overflow

Info

Disclosure
Jul 29, 2003

Discovery
Unknown

Dates

Exploit
Dec 22, 2004

Solution
Unknown

Description

 A local overflow exists in Sun Solaris. Solaris fails to handle an overly long LD_PRELOAD environment variable while launching SUID/SGID executables resulting in a stack based overflow. By setting LD_PRELOAD to a specially crafted value, an attacker can cause a deny of service or even execute arbitrary code with elevated priviledges resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public, Exploit Commercial
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Sun has released a patch to address this vulnerability.

Products

Sun Microsystems, Inc.

Solaris

 2.6
7
8
9

References

Credit
  • Jouko Pynnonen - joukoiki.fi - Personal Page


Direct URL: http://osvdb.org/8722