20010502 Solaris mailx Vulnerabilitymailing list
http://archives.neohapsis.com/archives/bugtraq/2001-05/0016.html CVE-2001-0565
Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (1)
Record summary
CVE-2001-0565 has a selected CVSS score of 4.6; EIP currently links 2 catalogued exploits.
Description
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBSolaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (1)ExploitDB exploitby Pablo SorNot analyzed1 file
ExploitDBSolaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (2)ExploitDB exploitby Pablo SorNot analyzed1 file
References
620010511 Solaris /usr/bin/mailx exploit (SPARC)mailing list
http://online.securityfocus.com/archive/1/184210 VU#446864Third-party advisory
http://www.kb.cert.org/vuls/id/446864 2610vdb entry
http://www.securityfocus.com/bid/2610 solaris-mailx-f-bo(8246)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/8246 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0565