CVE-2005-2071 traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privileges via (1) a large number of -g arguments or (2) a malformed -s argument with a...
MediumCVSS 4.6
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privileges via (1) a large number of -g arguments or (2) a malformed -s argument with a trailing . (dot).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun solaris | = 10.0 | No fix listed |
References
- 20050624 Solaris 10 /usr/sbin/traceroute vulnerabilities mailing-list
- 20050624 Re: [Full-disclosure] Solaris 10 /usr/sbin/traceroute vulnerabilities mailing-list
- 20050624 Re: Solaris 10 /usr/sbin/traceroute vulnerabilities mailing-list
- 17708 third-party-advisory vendor-advisory
- 1015261 vdb-entry
- 102060 vendor-advisory
- 14049 exploit vdb-entry
- ADV-2005-2564 vdb-entry vendor-advisory