Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

SCO OpenServer rmail Buffer Overflow Vulnerability

SCO OpenServer 5 ships with several suid 'bin' executables used in printing- and email-related tasks.

This includes rmail, a component of the MMDF mail system used to interpret incoming email received through uucp.

'rmail' contains a confirmed locally exploitable buffer overflow condition present in the handling of command-line parameters.

If properly exploited, this can yield user 'bin' privileges to the attacker.







 

Privacy Statement
Copyright 2009, SecurityFocus