CVE-2001-0652 Memory corruption in n/a

High 7.2 Published 9 Mar 2002 Updated 8 Aug 2024

Local attackers can gain root privileges via a heap overflow in xlock triggered by long environment variables.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2001-0652?

CVE-2001-0652 is a high-severity memory corruption vulnerability in Sun Sunos, published on 9 Mar 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.

Which versions are affected by CVE-2001-0652?

It affects 1 product.

Products include Sun Sunos.

How do I fix CVE-2001-0652?

No fix has been published for CVE-2001-0652 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2001-0652 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2001-0652 exists.

Public exploit code: 2 Exploit-DB entries.

All Sun Sunos vulnerabilities

Sources

Also known as GHSA-j3w4-jrr4-3qpc.