• info
• discussion
• exploit
• solution
• references

Solaris lp -d Option Buffer Overflow Vulnerability

Solution:
Removal of the setuid bit will eliminate this vulnerability, but will prevent printing from working properly.


Sun Solaris 7.0_x86

• Sun 107116-05
  http://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=107116&method= F

Sun Solaris 2.6

• Sun 106235-06
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-106235-06-1

Sun Solaris 7.0

• Sun 107115-05
  http://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=107115&method= F

Sun Solaris 2.6_x86

• Sun 106236-06
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-106236-06-1