Description
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
References
- cu-argv-bo(6224) vdb-entry
- 20010117 Solaris /usr/bin/cu Vulnerability mailing-list
- 20010123 Solaris /usr/bin/cu Vulnerability mailing-list