vendor:
Not mentioned
by:
Solar Eclipse
7.5
CVSS
HIGH
Format String Vulnerability
134
CWE
Product Name: Not mentioned
Affected Version From: Solaris/SPARC 2.7
Affected Version To: Solaris/SPARC 7
Patch Exists: NO
Related CWE: Not mentioned
CPE: Not mentioned
Platforms Tested: Solaris/SPARC
2000
Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7
This is an exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7. The exploit allows an attacker to execute arbitrary code with the privileges of the vulnerable program. The exploit is based on the exploit by Warning3 and was modified by Solar Eclipse. The exploit uses a format string vulnerability in the Solaris/SPARC operating system to overwrite the return address and execute shellcode.
Mitigation:
The vulnerability can be mitigated by applying the latest patches and updates for the Solaris/SPARC operating system.