Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
2001-03-26T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 7.2 (HIGH)
AV:L/AC:L/Au:N/C:C/I:C/A:C
3.9
10.0
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | sun | solaris | 2.6 | Yes |
Operating System | sun | sunos | ≤ 5.8 | Yes |
Operating System | sun | sunos | 5.4 | Yes |
Operating System | sun | sunos | 5.5 | Yes |
Operating System | sun | sunos | 5.5.1 | Yes |
Operating System | sun | sunos | 5.7 | Yes |