• info
• discussion
• exploit
• solution
• references

Solaris ufsrestore Buffer Overflow Vulnerability

Solution:
A good work-around is to remove the setuid bit from ufsrestore.

Vendor fixes are available:


Sun Solaris 2.6

• Sun 105722-06
  http://sunsolve.sun.com/securitypatch

Sun Solaris 7.0

• Sun 106793-07
  http://sunsolve.sun.com/securitypatch

Sun Solaris 8_x86

• Sun 109092-04
  http://sunsolve.sun.com/securitypatch


• Sun 110402-02
  http://sunsolve.sun.com/securitypatch

Sun Solaris 2.6_x86

• Sun 105723-06
  http://sunsolve.sun.com/securitypatch

Sun Solaris 8_sparc

• Sun 109091-04
  http://sunsolve.sun.com/securitypatch


• Sun 110387-02
  http://sunsolve.sun.com/securitypatch

Sun Solaris 2.5

• Sun 103261-08
  http://sunsolve.sun.com/securitypatch

Sun Solaris 7.0_x86

• Sun 106794-07
  http://sunsolve.sun.com/securitypatch

Sun Solaris 2.5_x86

• Sun 103262-08
  http://sunsolve.sun.com/securitypatches

Sun Solaris 2.5.1 _x86

• Sun 103641-35
  http://sunsolve.sun.com/securitypatch

Sun Solaris 2.5.1

• Sun 103640-35
  http://sunsolve.sun.com/securitypatch