10
CVSSv2

CVE-1999-0973

Published: 07/12/1999 Updated: 30/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in Solaris snoop program allows remote malicious users to gain root privileges via a long domain name when snoop is running in verbose mode.

Vulnerable Product Search on Vulmon Subscribe to Product

sun sunos 5.5.1

sun solaris 2.5.1

sun solaris 2.5

sun solaris 2.6

sun sunos 5.3

sun solaris 2.4

sun sunos 5.7

sun sunos 5.4

sun sunos 5.5

sun sunos -

sun solaris 7.0

Exploits

source: wwwsecurityfocuscom/bid/858/info If a solaris machine is running snoop in verbose mode, it may be possible to compromise its security remotely by exploiting a buffer overflow in snoop The problem is a buffer with a predefined length of 1024 that can be overflowed in the print_domain_name function The priviliges granted to arbitr ...