CVE

Id
4483  
CVE No.
CVE-2002-0089  
Status
Candidate  
Description
Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.  
Phase
Modified (20061101)  
Votes
ACCEPT(3) Cole, Green, Ziese | NOOP(3) Christey, Foat, Wall  
Comments
Christey> VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0035.html | BUGTRAQ:20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities | URL:http://online.securityfocus.com/archive/1/270122 | BID:4624 | URL:http://www.securityfocus.com/bid/4624 | Christey> CONFIRM:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F27353  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22071 4483 CVE-2002-0089 BUGTRAQ:20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities  View
22072 4483 CVE-2002-0089 URL:http://online.securityfocus.com/archive/1/270122  View
22073 4483 CVE-2002-0089 MISC:http://www.esecurityonline.com/advisories/eSO2397.asp  View
22074 4483 CVE-2002-0089 BID:4624  View
22075 4483 CVE-2002-0089 URL:http://www.securityfocus.com/bid/4624  View
22076 4483 CVE-2002-0089 OVAL:oval:org.mitre.oval:def:67  View
22077 4483 CVE-2002-0089 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:67  View
22078 4483 CVE-2002-0089 OVAL:oval:org.mitre.oval:def:68  View
22079 4483 CVE-2002-0089 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:68  View
22080 4483 CVE-2002-0089 XF:solaris-admintool-d-bo(8954)  View
22081 4483 CVE-2002-0089 URL:http://www.iss.net/security_center/static/8954.php  View
22082 4483 CVE-2002-0089 XF:solaris-admintool-prodvers-bo(8955)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64238 JVNDB-2000-000018 Sun Solaris の管理ツールにおけるバッファオーバーフローの脆弱性 Sun Solaris の admintool において、admintool をコマンドラインから実行する際、.cdtoc ファイルに対して使用する PRODVERS 引数の文字列のチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0089 4483 7.2 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000018.html  View