HP-UX 11 CDE DTPrintInfo Display Environment Variable Buffer Overflow Vulnerability

2003-10-08T00:00:00
ID EDB-ID:23236
Type exploitdb
Reporter Davide Del Vecchio
Modified 2003-10-08T00:00:00

Description

HP-UX 11 CDE DTPrintInfo Display Environment Variable Buffer Overflow Vulnerability. CVE-2003-0840. Dos exploit for hp-ux platform

                                        
                                            source: http://www.securityfocus.com/bid/8795/info

It has been reported that dtprintinfo, installed setuid root by default, is susceptible to a locally exploitable buffer overflow vulnerability. The condition is triggered when the value of the DISPLAY environment variable is set to a string exceeding 9777 bytes in length. The vulnerability may allow for local attackers to gain root privileges on the affected host. 

export DISPLAY="`perl -e 'printf "A" x 9777'`"