CVE-2003-1067

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/9088/Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1Patch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/n-108.shtmlPatch, Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
http://www.securityfocus.com/bid/64758
http://www.securityfocus.com/bid/7991Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/12379
http://secunia.com/advisories/9088/Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1Patch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/n-108.shtmlPatch, Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
http://www.securityfocus.com/bid/64758
http://www.securityfocus.com/bid/7991Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/12379

Timeline

Published: Jun 19, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10687.2Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a d CVE-2003-10695.0The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite l CVE-2003-10705.0Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).CVE-2003-10712.1rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary CVE-2003-10722.1Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).CVE-2003-10731.2A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot d CVE-2003-10747.2Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges.CVE-2003-10755.0Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary CVE-2003-10767.2Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain CVE-2003-10772.1Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system CVE-2003-10787.5The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.CVE-2003-10795.0Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a deni