header-logo
Suggest Exploit
vendor:
OpenServer 5.0.6
by:
SecurityFocus
7.2
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: OpenServer 5.0.6
Affected Version From: SCO OpenServer 5.0.6
Affected Version To: SCO OpenServer 5.0.6
Patch Exists: Yes
Related CWE: N/A
CPE: o:sco:openserver_5.0.6
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2001

SCO OpenServer 5.0.6 lpadmin Buffer Overflow Vulnerability

SCO OpenServer 5.0.6 (and possibly earlier versions) ships with several suid 'bin' executables used in printer administration and related tasks. This includes lpadmin, a component used to manage and configure print destinations, devices and printer interface programs. 'lpadmin' contains a locally exploitable buffer overflow condition present in the handling of command-line parameters. If properly exploited, this can yield user 'bin' privileges to the attacker.

Mitigation:

Upgrade to the latest version of SCO OpenServer 5.0.6 or later.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/2553/info

SCO OpenServer 5.0.6 (and possibly earlier versions) ships with several suid 'bin' executables used in printer administration and related tasks.

This includes lpadmin, a component used to manage and configure print destinations, devices and printer interface programs.

'lpadmin' contains a locally exploitable buffer overflow condition present in the handling of command-line parameters.

If properly exploited, this can yield user 'bin' privileges to the attacker. 

/opt/K/SCO/Unix/5.0.6Ga/usr/lib/lpadmin `perl -e 'print "A" x 7000'`

Memory fault - core dumped

Navigation

Suggest Exploit

Services By CQR