high7.2Public exploit code
CVE-2001-1076
Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 2.6/2.6/7.0/8 whodo - Local Buffer Overflow2001-06-01 · local · solaris · Verified
Impact
Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.5, 2.5.1, 2.6, 7.0, 8.0 |
| Sun | Sunos | All versions Versions 5.5, 5.5.1, 5.7, 5.8 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html
- http://www.securityfocus.com/bid/2935
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6802
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html
- http://www.securityfocus.com/bid/2935
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6802
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47