(Sun Issues Fix) FreeBSD libc Buffer Overflow in inet_network() May Let Users Deny Service or Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1020204
|
|
SecurityTracker URL: http://securitytracker.com/id?1020204
|
|
CVE Reference: CVE-2008-0122
(Links to External Site)
|
Updated: Jun 11 2008
|
Original Entry Date: Jun 5 2008
|
Impact: Denial of service via local system, Denial of service via network, Execution of arbitrary code via local system, Execution of arbitrary code via network, User access via local system, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Sun Alert
|
Description: A vulnerability was reported in libc on FreeBSD. A user may be able to deny service or execute arbitrary code on the target system. Sun Solaris is affected.
A user may be able to supply specially crafted data to the inet_network() function to overwrite memory and execute arbitrary code
with the privileges of the program calling the function.
Bjoern A. Zeeb and Nate Eldredge reported this vulnerability.
|
Impact: A user may be able to deny service or execute arbitrary code on the target system. The specific impact depends on the program calling the vulnerable function.
|
Solution: Sun has issued the following fixes.
SPARC Platform
* Solaris 8 for libresolv(3LIB)with patch 109326-21 or later
*
Solaris 8 for libsocket(3LIB)with patch 111327-06 or later
* Solaris 8 for SunOS 4.x Binary Compatibility libraries with patch
109152-03 or later
* Solaris 9 for SunOS 4.x Binary Compatibility libraries with patch 112874-45 or later
* Solaris 10
for SunOS 4.x Binary Compatibility libraries with patch 136892-01 or lateolaris 8 for libsocket(3LIB) with patch 111328-05 or later
* OpenSolaris based upon builds snv_88 or later (SunOS 4.x Binary Compatibility libraries only (6653976))
X86 Platform
* Solaris 8 for libresolv(3LIB) with patch 109327-21 or later
* Solaris 8 for libsocket(3LIB) with patch 111328-05 or later
The
Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238493-1
|
Cause: Boundary error
|
Underlying OS: UNIX (Solaris - SunOS)
|
Underlying OS Comments: 8, 9, 10
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Thu, 5 Jun 2008 17:42:24 -0400
Subject: http://sunsolve.sun.com/search/document.do?assetkey=1-66-238493-1
|
CVE-2008-0122
|
|
