Signature Detail
Short Name |
RPC:RPC.SNMPXDMID:OVERFLOW |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
RPC |
Keywords |
Solaris snmpXdmid Buffer Overflow |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
RPC: Solaris snmpXdmid Buffer Overflow
This signature detects attempts to exploit a known vulnerability against snmpXdmid, the SNMP-to-DMI and DMI-to-SNMP mapper daemon in Solaris. Attackers can send a maliciously crafted DMI request, which the snmpXdmid attempts to translate into an SNMP trap, causing a buffer overflow, and allowing the attacker to execute arbitrary commands.
Extended Description
Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid contains a remotely exploitable buffer overflow vulnerability. The overflow occurs when snmpXdmid attempts to translate a 'malicious' DMI request into an SNMP trap. SnmpXdmid runs with root privileges and any attacker to successfully exploit this vulnerability will gain superuser access immediately.
Affected Products
- Sun Solaris 2.6
- Sun Solaris 2.6_x86
- Sun Solaris 7.0
- Sun Solaris 7.0_x86
- Sun Solaris 8 Sparc
- Sun Solaris 8 X86
References