• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Solaris CDE ToolTalk Set Default Session Memory Corruption Vulnerability

A problem in the Common Desktop Environment (CDE) ToolTalk infrastructure has been discovered. This problem has been reported as affecting the Solaris operating system.

Under some circumstances, it may be possible to cause a core dump in ToolTalk. Under certain conditions, a program making use of the _Tt_c_procid::set_default_session function may cause a core dump within the program. It is currently unknown whether this is an exploitable issue.