Oracle Solaris 11.x / 10 whodo / w Buffer Overflow

Posted on 18 April 2020

A difficult to exploit heap-based buffer overflow in setuid root whodo and w binaries distributed with Solaris allows local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges.