Sun Solaris snoop format string vulnerability
Published:		12.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		9214
Type:		remote
Level:		5/10
Description:		Format string vulnerability on SMB traffic parsing.

Affected:		ORACLE : Solaris 8
		ORACLE : Solaris 9
		ORACLE : Solaris 10
CVE:		CVE-2008-0965 (Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.)
		CVE-2008-0964

Original document		IDEFENSE, iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities (12.08.2008)
		IDEFENSE, iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Format String Vulnerabilities (12.08.2008)

Discuss:

Read or add your comments to this news (0 comments)