vendor:
Solaris
by:
snooq
7.2
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Solaris
Affected Version From: System V UNIX
Affected Version To: Solaris/SunOS, HP-UX, AIX, IRIX, and Unixware
Patch Exists: YES
Related CWE: CVE-2001-0972
CPE: o:sun:solaris
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Solaris
2001
Buffer Overflow in ‘login’ Program
The 'login' program is used in UNIX systems to authenticate users with a username and password. Versions of 'login' descended from System V UNIX contain a buffer overflow when handling environment variables. Unauthenticated clients can exploit this issue to execute arbitrary code as root. On systems where 'login' is installed setuid root, local attackers can elevate privileges.
Mitigation:
Ensure that the 'login' program is not installed setuid root, and that environment variables are not used to pass data to the program.