critical10.0Public exploit code
CVE-1999-0977
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (4)1999-12-10 · remote · solaris · Verified
- Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (3)2000-11-10 · remote · solaris · Verified
- Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (2)1999-06-24 · remote · solaris · Verified
- Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (1)1999-06-24 · remote · solaris · Verified
- Solaris sadmind - Remote Buffer Overflow2000-12-01 · remote · solaris · Verified
Impact
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.5, 2.5.1, 2.6, 7.0 |
| Sun | Sunos | All versions Versions 5.5, 5.5.1, 5.7 |
References
- NVD record
- CVE.org record
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191
- http://www.osvdb.org/2558
- http://www.securityfocus.com/bid/2354
- http://www.securityfocus.com/bid/866
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191
- http://www.osvdb.org/2558
- http://www.securityfocus.com/bid/2354
- http://www.securityfocus.com/bid/866