CVE-2001-0652

CVE-2001-0652 is a heap buffer overflow in the Solaris xlock utility (SunOS/Solaris 2.6–8) that allows a local user to gain root privileges by supplying an overly long environment value in XFILESEARCHPATH or XUSERFILESEARCHPATH. The underlying issue is a lack of length checks when copying the env...

CVE-2001-0652

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long 1 XFILESEARCHPATH or 2 XUSERFILESEARCHPATH environmental variable...