CVE-2008-0965

Related Files

iDEFENSE Security Advisory 2008-08-04.2

Posted Aug 13, 2008

Authored by iDefense Labs, Gael Delalleau | Site idefense.com

iDefense Security Advisory 08.04.08 - Remote exploitation of multiple format string vulnerabilities in Sun Microsystems Inc.'s snoop could allow an attacker to execute arbitrary code with the privileges of the nobody user. Multiple format string vulnerabilities exist within the code that parses and displays SMB traffic. All of the vulnerabilities are present due to unsanitized user input being passed to printf-style formatting function. This allows an attacker to overwrite arbitrary addresses with arbitrary data, which can result in the execution of arbitrary code. iDefense has confirmed the existence of these vulnerabilities in snoop for Solaris 10 8/07. Other versions may also be affected.

tags | advisory, remote, arbitrary, vulnerability

systems | solaris

advisories | CVE-2008-0965

SHA-256 | 86a629216fb461e13eaaf00def47aaea7455872dfc3360b326c676d8ff366859

Download | Favorite | View