19990308 Solaris "/usr/bin/write" bugmailing list
http://marc.info/?l=bugtraq&m=92100752221493&w=2 CVE-1999-1371
Solaris 2.6/2.7 - '/usr/bin/write' Local Overflow
Record summary
CVE-1999-1371 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSolaris 2.6/2.7 - '/usr/bin/write' Local OverflowExploitDB exploitby Pablo SorNot analyzed1 file
References
4securiteam.com
http://www.securiteam.com/exploits/5ZP0O1P35O.html solaris-write-bo(7546)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7546 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-1999-1371