Signature Detail

OS: Solaris x86 nlps_server Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Solaris nips_server process (a process installed on port 2766). Version nlps_server 1.0 is susceptible. Attackers can remotely create a buffer overflow to gain root access.

Extended Description

Solaris 2.4, 2.5, and 2.51 x86 are vulnerable to a buffer overflow in nlps_server, a process residing on port 2766 when installed. Attackers can exploit this buffer overflow to gain remote root access.

Affected Products

• Sun nlps_server 1.0.0

References

• BugTraq: 2319
• CVE: CVE-1999-1588
• URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-1999-1588
• URL: http://www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.c