vendor:
Solaris, HP-UX
by:
LAST STAGE OF DELIRIUM
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Solaris, HP-UX
Affected Version From: 10.2
Affected Version To: 11
Patch Exists: YES
Related CWE:
CPE: sun:solaris, hp:hp-ux
Platforms Tested:
1999
Remotely Exploitable Buffer Overflow in rpc.cmsd
There is a remotely exploitable buffer overflow vulnerability in rpc.cmsd which ships with Sun's Solaris and HP-UX versions 10.20, 10.30 and 11.0 operating systems. The consequence is a remote root compromise.
Mitigation:
Apply the necessary patches provided by the vendor.