20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflowmailing list
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html CVE-2002-0158
Sun Solaris 2.6/7.0/8 - XSun Color Database File Heap Overflow
Record summary
CVE-2002-0158 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSun Solaris 2.6/7.0/8 - XSun Color Database File Heap OverflowExploitDB exploitby gloomyNot analyzed1 file
References
820020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflowmailing list
http://marc.info/?l=bugtraq&m=101776858410652&w=2 sunsolve.sun.comConfirmation
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F108652 4408vdb entry
http://www.securityfocus.com/bid/4408 solaris-xsun-co-bo(8703)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/8703 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-0158 oval:org.mitre.oval:def:14vdb entrysignature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14 oval:org.mitre.oval:def:33vdb entrysignature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33