vendor:
Arcgis
by:
Kevin Finisterre and John H.
7.5
CVSS
HIGH
Format String Vulnerability
134
CWE
Product Name: Arcgis
Affected Version From: ESRI Arcgis 9.x
Affected Version To: ESRI Arcgis 9.x
Patch Exists: NO
Related CWE:
CPE: a:esri:arcgis:9.x
Platforms Tested: Solaris 10
Unknown
ESRI 9.x Arcgis local root format string exploit
This exploit overwrites the thr_jmp_table in ESRI Arcgis 9.x, allowing for local root privilege escalation. The exploit has been tested on Solaris 10.
Mitigation:
Patch the vulnerability and update to a non-vulnerable version of the software.
