Description
Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.
References
- 4639 vdb-entry
- VU#638099 third-party-advisory
- oval:org.mitre.oval:def:79 vdb-entry signature
- 778 vdb-entry
- oval:org.mitre.oval:def:41 vdb-entry signature
- CA-2002-10 third-party-advisory
- 20020430 Adivosry + Exploit for Remote Root Hole in Default Installation of Popular Commercial Operating System mailing-list
- solaris-rwall-format-string(8971) vdb-entry
- 20020430 [VulnWatch] Adivosry + Exploit for Remote Root Hole in Default Installation of Popular Commercial Operating System mailing-list