4.9
CVSSv2

CVE-2006-3824

Published: 25/07/2006 Updated: 17/10/2018
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 500
Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N

Vulnerability Summary

systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow.

Vulnerable Product Search on Vulmon Subscribe to Product

sun solaris 10.0

Exploits

Solaris 10 sysinfo(2) local kernel memory disclosure exploit ...
/* * $Id: raptor_sysinfoc,v 12 2006/08/22 13:47:54 raptor Exp $ * * raptor_sysinfoc - Solaris sysinfo(2) kernel memory leak * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeefinfo> * * systeminfoc for Sun Solaris allows local users to read kernel memory via * a 0 variable count argument to the sysinfo system call, which causes a ...
/* Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure exploit * =================================================================== * Local exploitation of an integer overflow vulnerability in Sun * Microsystems Inc Solaris allows attackers to read kernel memory from a * non-privileged userspace process The vulnerability specifically ...