Sun Solaris sadmind multiple security vulnerabilities
Published:		25.05.2009
Source:		BUGTRAQ
SecurityVulns ID:		9933
Type:		remote
Level:		7/10
Description:		Integer overflow, buffer overflow.

Affected:		ORACLE : Solaris 8
		ORACLE : Solaris 9
CVE:		CVE-2008-3870 (Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.)
		CVE-2008-3869 (Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.)

Original document		SECUNIA, Secunia Research: Sun Solaris "sadmind" Buffer Overflow Vulnerability (25.05.2009)
		SECUNIA, Secunia Research: Sun Solaris "sadmind" Integer Overflow Vulnerability (25.05.2009)

Discuss:

Read or add your comments to this news (0 comments)