Sploitus

Exploit for System V login argument array buffer overflow

saint Β· 2007-03-30

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=SAINT:34A93A021D186C7C9EABFFC9D0FEB6B3
Added: 03/30/2007  
CVE: [CVE-2001-0797](<https://vulners.com/cve/CVE-2001-0797>)  
BID: [3681](<http://www.securityfocus.com/bid/3681>)  
OSVDB: [690](<http://www.osvdb.org/690>)  


### Background

The login program is used by various applications for authentication to the system. 

### Problem

The login program dervied from System V is affected by a buffer overflow vulnerability when processing a long argument array. A remote attacker could execute arbitrary commands by initiating a telnet or rlogin session with a large number of environment variables. 

### Resolution

Apply one of the patches referenced in [Sun Document ID 00213](<http://sunsolve.sun.com/search/document.do?assetkey=1-22-00213-1>). 

### References

<http://www.cert.org/advisories/CA-2001-34.html>  


### Limitations

Exploit works on Sun SPARC Solaris versions 2.6 (03/98) and 7 (11/99). 

### Platforms

SunOS / Solaris