Description
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
References
- sun-solaris-snoop1m-command-execution(44222) vdb-entry
- 240101 vendor-advisory
- 20080804 Solaris snoop SMB Decoding Multiple Format String Vulnerabilities third-party-advisory
- 1020633 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
- ADV-2008-2311 vdb-entry
- 31535 third-party-advisory
- 31386 third-party-advisory
- solaris-snoop1m-format-string(44415) vdb-entry
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
- oval:org.mitre.oval:def:5742 vdb-entry signature
- 30556 vdb-entry