|
|
DG/UX lpsched Long Error Message Buffer Overflow Vulnerability
DGUX is the Data General revision of UNIX. It is designed as a solution for Intel systems produced by Data General. A problem in the handling of error messages by the printer scheduler could allow arbitrary execution of code. By placing a request to the lpsched program consisting of a long and non-existing host name, it is possible to take advantage of a buffer overflow in the error reporting code of the lpsched program. Therefore, it is possible for a local user to execute arbitrary code with the euid of root. |
|
Privacy Statement |