Description
Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors.
References (5)
Core 5
Core References
Patch, Vendor Advisory x_refsource_confirm
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1
Various Sources x_refsource_misc
http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/58110
Patch, Vendor Advisory vendor-advisory
x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/53188
Scores
EPSS
0.0004
EPSS Percentile
13.0%
Details
CWE
CWE-119
Status
published
Products (25)
sun/opensolaris
snv_01 (2 CPE variants)
sun/opensolaris
snv_02 (2 CPE variants)
sun/opensolaris
snv_03 (2 CPE variants)
sun/opensolaris
snv_04 (2 CPE variants)
sun/opensolaris
snv_05 (2 CPE variants)
sun/opensolaris
snv_06 (2 CPE variants)
sun/opensolaris
snv_07 (2 CPE variants)
sun/opensolaris
snv_08 (2 CPE variants)
sun/opensolaris
snv_09 (2 CPE variants)
sun/opensolaris
snv_10 (2 CPE variants)
... and 15 more
Published
Sep 14, 2009
Tracked Since
Feb 18, 2026