CVE-2003-1066: Buffer Overflow
Published Dec 31, 2003
·Updated
Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.
Affected Software
8 affected components
Sun SunOS=5.7
Sun SunOS=5.8
Sun Solaris=9.0
Sun Solaris=7.0
Sun Solaris=9.0
Sun Solaris=2.6
Sun Solaris=8.0
Sun SunOS
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Feb 8, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1066?
CVE-2003-1066 has a high severity due to its potential to cause denial of service and arbitrary code execution.
2
How do I fix CVE-2003-1066?
The vulnerability can be mitigated by applying patches provided by the vendor for affected Solaris systems.
3
What versions are affected by CVE-2003-1066?
CVE-2003-1066 affects Solaris versions 2.6 through 9 including specific SunOS versions.
4
What type of attack does CVE-2003-1066 facilitate?
CVE-2003-1066 allows remote attackers to exploit a buffer overflow in the syslog daemon.
5
What are the consequences of an exploitation of CVE-2003-1066?
An exploitation of CVE-2003-1066 could lead to a syslog daemons crash and unauthorized execution of arbitrary code.