20010810 NSFOCUS SA2001-05 : Solaris Xlock Heap Overflow Vulnerabilitymailing list
http://marc.info/?l=bugtraq&m=99745571104126&w=2 CVE-2001-0652
Solaris 2.6/7/8 (SPARC) - xlock Heap Overflow
Record summary
CVE-2001-0652 has a selected CVSS score of 7.2; EIP currently links 2 catalogued exploits.
Description
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBSolaris 2.6/7/8 (SPARC) - xlock Heap OverflowExploitDB exploitby NsfocusNot analyzed1 file
ExploitDBSolaris 8 - x86 xlock Heap OverflowExploitDB exploitby NsfocusNot analyzed1 file
References
63160vdb entry
http://www.securityfocus.com/bid/3160 solaris-xlock-bo(6967)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6967 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0652 oval:org.mitre.oval:def:10vdb entrysignature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10 oval:org.mitre.oval:def:131vdb entrysignature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A131