Vulnerability

    dtmail

Affected

    Solaris 8

Description

    'scanf' found following.   He was playing  around on his  solaris8
    box and he found something strange.

        console@sunrise:pts/11:~$ /usr/dt/bin/dtmail
        libSDtMail: Error: Xt Error: Can't open display:
        console@sunrise:pts/11:~$ export DISPLAY="%s%s%s"
        console@sunrise:pts/11:~$ /usr/dt/bin/dtmail
        Segmentation Fault
        console@sunrise:pts/11:~$

    At first glance  it appears to  be a format  string bug.   However
    'scanf' checked a little further:

        console@sunrise:pts/11:~$ export DISPLAY="%"
        console@sunrise:pts/11:~$ /usr/dt/bin/dtmail
        Segmentation Fault
        console@sunrise:pts/11:~$

    It only needed a % to crash.

Solution

    Nothing yet.