|
|
>> Sun Solaris "sadmind" Remote Buffer Overflow Vulnerability
|
Title : Sun Solaris "sadmind" Remote Buffer Overflow Vulnerability
VUPEN ID : VUPEN/ADV-2008-2824
CVE ID : CVE-2008-4556
Rated as : High Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-10-15
|
A vulnerability has been identified in Sun Solaris, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a stack overflow error in the "adm_build_path()" function within the Solstice AdminSuite administration daemon (sadmind) when processing malformed requests, which could be exploited by remote attackers to crash an affected system or execute arbitrary code.
Affected Products
Sun Solaris 9
Sun Solaris 8
Solution
Sun Solaris 8 (SPARC) - Apply patch 116455-02 or later
Sun Solaris 9 (SPARC) - Apply patch 116453-03 or later
Sun Solaris 8 (x86) - Apply patch 116442-02 or later
Sun Solaris 9 (x86) - Apply patch 116454-03 or later
References
http://www.vupen.com/english/advisories/2008/2824
http://sunsolve.sun.com/search/document.do?assetkey=1-66-245806-1
http://risesecurity.org/advisories/RISE-2008001.txt
Credits
Vulnerability reported by Adriano Lima (RISE Security).
ChangeLog
2008-10-15 : Initial release
2008-11-14 : Updated References
2009-05-25 : Updated Solution
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
