CVE-2000-0337: Buffer Overflow
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Xsun X server (Solaris 7)from your environment.Uninstall or disable the Xsun X server on Solaris 7 systems if X server functionality is not required. Do not run Xsun until a vendor patch or advisory is made available.
- Configuration
Restrict execution of the Xsun binary to trusted administrative accounts by changing filesystem permissions or local access controls so unprivileged local users cannot invoke it until a patch is available.
Xsun X server (Solaris 7) executable permissions = restrict to administrators/root - Compensating control
Restrict local interactive access to affected Solaris 7 systems to trusted accounts (disable or limit unprivileged local user shells) and monitor for attempts to execute the Xsun binary until the vulnerability is remediated by the vendor.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0337?
CVE-2000-0337 is considered to have a high severity due to its potential to allow local users to gain root privileges.
How do I fix CVE-2000-0337?
To mitigate CVE-2000-0337, apply the latest patches provided by Oracle for Solaris 7 and Solaris 8.
Who is affected by CVE-2000-0337?
CVE-2000-0337 affects local users of Solaris 7 and Solaris 8 who can exploit a buffer overflow in the Xsun X server.
What impact does CVE-2000-0337 have on systems?
CVE-2000-0337 can lead to unauthorized root access, compromising system integrity and security.
Is there a workaround for CVE-2000-0337?
A practical workaround for CVE-2000-0337 is to restrict access to the affected Xsun X server and avoid using the -dev parameter.