Sun Solstice AdminSuite sadmind Service adm_build_path Buffer Overflow (CVE-2008-4556)

Solstice AdminSuite is a set of applications for distributed system administration. sadmind is a daemon used by Solstice AdminSuite to control the servers running Sun Solaris operating system. A stack buffer overflow vulnerability has been reported in Solstice AdminSuite's sadmind. The...

Sun Solstice AdminSuite 'sadmind' 'adm_build_path()'远程栈缓冲区溢出漏洞

BUGTRAQ ID: 31751 CNCAN ID：CNCAN-2008101623 Sun Solstice AdminSuite是一款图形用户接口工具集，用于执行管理用户，组，主机，系统文件，打印机，磁盘，文件系统等。 Sun Solstice AdminSuite sadmind存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题函数admbuildpath当使用strcat函数追加用户提供的数据到基于栈的缓冲区时缺少充分过滤，导致缓冲区溢出，精心构建提交数据可以导致以守护进程上下文执行任意指令，导致系统入侵。 Sun Solstice AdminSuite...

Stack overflow

Stack-based buffer overflow in the admbuildpath function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request...

CVE-2008-4556

CVE-2008-4556 is a stack-based buffer overflow in the adm_build_path function of sadmind (Sun Solstice AdminSuite) on Solaris 8/9. The vulnerability allows remote attackers to execute arbitrary code via a crafted RPC request. Public references and connected data show that this has been exploited ...

CVE-2008-4556

Stack-based buffer overflow in the admbuildpath function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request...