Sun Solaris ufsrestore buffer overflow
| sol-ufsrestore-bo (4711) |  High Risk |
Description:
The ufsrestore utility in Sun Solaris is used to restore files from backup created with the ufsdump command. The ufsrestore utility in Sun Solaris is vulnerable to a buffer overflow. An attacker can overflow the buffer that holds the pathname/command for an interactive session to gain local root access on the system.
Consequences:
Gain Access
Remedy:
Apply the appropriate patch for your system, as listed in Sun Microsystems, Inc. Security Bulletin #00210. See References.
References:
- BugTraq Mailing List, Tue Oct 23 2001 - 17:25:08 CDT: Sun Security Bulletin #00210 (fwd).
- BugTraq Mailing List, Wed Jun 14 2000 - 06:59:05 CDT: Vulnerability in Solaris ufsrestore.
- CIAC Information Bulletin I-065: SunOS ufsrestore Buffer Overflow Vulnerability.
- Sun Microsystems, Inc. Security Bulletin #00210: ufsrestore.
- BID-1348: Solaris ufsrestore Buffer Overflow Vulnerability
- CVE-2000-0471: Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
- OSVDB ID: 1398: Solaris ufsrestore pathname Overflow
- US-CERT VU#36866: Solaris ufsrestore buffer overflow in command pathname parameters for interactive session
Platforms Affected:
- Sun Solaris 1.1
- Sun Solaris 1.1.1a
- Sun Solaris 1.1.2
- Sun Solaris 1.1.3 U1
- Sun Solaris 1.1.3
- Sun Solaris 1.1.4
- Sun Solaris 1.1.4 JL
- Sun Solaris 1.2
- Sun Solaris 2.0
- Sun Solaris 2.1
- Sun Solaris 2.2
- Sun Solaris 2.3
- Sun Solaris 2.4
- Sun Solaris 2.4 x86
- Sun Solaris 2.5 x86
- Sun Solaris 2.5
- Sun Solaris 2.5.1
- Sun Solaris 2.5.1 PPC
- Sun Solaris 2.5.1 x86
- Sun Solaris 2.6
- Sun Solaris 2.6 HW5
- Sun Solaris 2.6 HW3
- Sun Solaris 5.3
- Sun Solaris 5.4 x86
- Sun Solaris 5.4
- Sun Solaris 5.5
- Sun Solaris 5.5 x86
- Sun Solaris 5.5.1
- Sun Solaris 5.5.1 x86
- Sun Solaris 5.6 x86
- Sun Solaris 7.0
- Sun Solaris 7.0 x86
- Sun Solaris 8.0
- Sun Solaris x86
- Sun SunOS 5.6
Reported:
Jun 14, 2000
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net