CVEvulnerability
CVE-2001-1582
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
Affected configurations
• sun solaris 8.0
• sun sunos 5.8
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://seclists.org/bugtraq/2001/Jul/0077.html seclists.org
- http://seclists.org/bugtraq/2001/Jul/0091.html seclists.org
- http://seclists.org/bugtraq/2001/Jun/0365.html seclists.org
- http://www.securiteam.com/unixfocus/5IP0O2A4KS.html Exploit
- http://www.securityfocus.com/bid/2931 Exploit, Patch
- http://seclists.org/bugtraq/2001/Jul/0077.html seclists.org
- http://seclists.org/bugtraq/2001/Jul/0091.html seclists.org
- http://seclists.org/bugtraq/2001/Jun/0365.html seclists.org
- http://www.securiteam.com/unixfocus/5IP0O2A4KS.html Exploit
- http://www.securityfocus.com/bid/2931 Exploit, Patch