CVE-2001-1582: Buffer Overflow

Published Dec 31, 2001

Updated

Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAPOPTIONS environment variable to a privileged program that uses libsldap.

Affected Software

2 affected components

Sun Solaris=8.0-unkown

Sun SunOS=5.8

Remediation

Patch Available

http://www.securityfocus.com/bid/2931

Event History

Dec 31, 2001

CVE Published

05:00 AM

Sep 23, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1582?

CVE-2001-1582 is classified as a high severity vulnerability due to the potential for local users to execute arbitrary code.

How do I fix CVE-2001-1582?

To mitigate CVE-2001-1582, it is recommended to apply patches provided by Oracle for Solaris 8 or disable the usage of environment variables in privileged programs.

Who is affected by CVE-2001-1582?

CVE-2001-1582 affects local users on Sun Solaris 8 and SunOS 5.8 systems that utilize the LDAP naming services library.

What is the cause of CVE-2001-1582?

CVE-2001-1582 is caused by a buffer overflow vulnerability in the LDAP options environment variable handling in the libsldap library.

Can CVE-2001-1582 be exploited remotely?

CVE-2001-1582 cannot be exploited remotely as it requires local access to the affected system.