Oracle Solaris 11.1 / 11.3 RSH - Local Root Stack Clash Exploit

EDB-ID: 42270
Author: Qualys Corporation
Published: 2017-06-28
CVE: CVE-2017-3629...
Type: Local
Platform: Solaris_x86
Aliases: Stack Clash
Advisory/Source: Link
Tags: Local
Vulnerable App: N/A 

  * Solaris_rsh.c for CVE-2017-3630, CVE-2017-3629, CVE-2017-3631 
  * Copyright (C) 2017 Qualys, Inc. 
  * 
  * This program is free software: you can redistribute it and/or modify 
  * it under the terms of the GNU General Public License as published by 
  * the Free Software Foundation, either version 3 of the License, or 
  * (at your option) any later version. 
  * 
  * This program is distributed in the hope that it will be useful, 
  * but WITHOUT ANY WARRANTY; without even the implied warranty of 
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
  * GNU General Public License for more details. 
  * 
  * You should have received a copy of the GNU General Public License 
  * along with this program.  If not, see <http://www.gnu.org/licenses/>. 
  */ 
  
 #include <errno.h> 
 #include <fcntl.h> 
 #include <signal.h> 
 #include <stdint.h> 
 #include <stdio.h> 
 #include <stdlib.h> 
 #include <string.h> 
 #include <sys/fcntl.h> 
 #include <sys/resource.h> 
 #include <sys/stat.h> 
 #include <sys/time.h> 
 #include <sys/types.h> 
 #include <sys/wait.h> 
 #include <unistd.h> 
  
 #ifndef timersub 
 #define timersub(a, b, result) \ 
     do { \ 
         (result)->tv_sec = (a)->tv_sec - (b)->tv_sec; \ 
         (result)->tv_usec = (a)->tv_usec - (b)->tv_usec; \ 
         if ((result)->tv_usec < 0) { \ 
             --(result)->tv_sec; \ 
             (result)->tv_usec += 1000000; \ 
         } \ 
     } while (0)
Related Posts