CVE-2000-0407: Buffer Overflow

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove Oracle Solaris netpr from your environment.

   Uninstall or remove the netpr binary from affected systems if it is not required. If removal is not possible, replace with a non-vulnerable alternative when available.

2. Configuration

   Restrict execution of the netpr binary to administrative accounts only by changing ownership, file permissions, and/or filesystem ACLs (for example: change owner to root and remove execute permission for non-admins).

   netpr executable_by_unprivileged_users = false
3. Compensating control

   Limit and harden local user accounts on Solaris hosts (remove unneeded accounts, enforce least privilege). Use host-based access controls to prevent unprivileged users from executing netpr and monitor access to the binary.

4. Operational

   Audit system logs for recent or suspicious invocations of netpr (indicating possible exploitation). If compromise is suspected, follow incident-response procedures (contain, investigate, and remediate; rebuild or restore affected hosts as necessary).

Event History

Frequently Asked Questions