CVE		CVE-2008-3870
Status		Candidate
Description		Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.
Phase		Assigned (29.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3870
References		BID : 35083
		BUGTRAQ : 20090523 Secunia Research: Sun Solaris "sadmind" Integer Overflow Vulnerability
		CONFIRM : http://sunsolve.sun.com/search/document.do?assetke...
		CONFIRM : http://support.avaya.com/elmodocs2/security/ASA-20...
		MISC : http://secunia.com/secunia_research/2008-47/
		OSVDB : 54668
		OVAL : oval:org.mitre.oval:def:6092
		SECTRACK : 1022275
		SECUNIA : 32473
		SECUNIA : 35191
		SUNALERT : 259468
		VUPEN : ADV-2009-1409
		XF : solaris-allocating-bo(50706)
SecurityVulns:		Sun Solaris sadmind multiple security vulnerabilities