HP-UX 11 CDE DTPrintInfo - Display Environment Variable Buffer Overflow

Author: Davide Del Vecchio
type: dos
platform: hp-ux
port: 
date_added: 2003-10-08  
date_updated: 2012-12-09  
verified: 1  
codes: CVE-2003-0840;OSVDB-9640  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 23236.txt  

source: https://www.securityfocus.com/bid/8795/info

It has been reported that dtprintinfo, installed setuid root by default, is susceptible to a locally exploitable buffer overflow vulnerability. The condition is triggered when the value of the DISPLAY environment variable is set to a string exceeding 9777 bytes in length. The vulnerability may allow for local attackers to gain root privileges on the affected host.

export DISPLAY="`perl -e 'printf "A" x 9777'`"