Bugtraq: Re: More buffer overrun crap -- Solaris 2.5.1 /usr/bin/ps

[kbrint () VISI COM (kevin brintnall)]

> The second tidbit is an apparent buffer overrun in getopt() itself; it
> blindly trusts argv[0] and it appears to generate its error message into
> a local buffer.  :-)
> In any case, even if these potential vulnerability aren't as exploitable
> as I might think, I would feel much safer if Sun were to patch these.
the getopt(3) problem has been fixed since 103612-21.  the most current
libc patch is 103612-23.  Get It.

 kevin brintnall <kbrint () visi com>
 network engineer, vector internet
 E3979560EF3E00B7 36D422A3C0F3741C