CVE-2001-0652 Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
HighCVSS 7.2
EPSS 0.92%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sunos | <= 5.9 | No fix listed |
References
- 20010810 NSFOCUS SA2001-05 : Solaris Xlock Heap Overflow Vulnerability mailing-list
- 3160 vdb-entry
- solaris-xlock-bo(6967) vdb-entry
- oval:org.mitre.oval:def:10 signature vdb-entry
- oval:org.mitre.oval:def:131 signature vdb-entry