Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LD…

published 2003-07-03 23 y ago modified 2026-06-16 4 mo ago also EUVD-2003-1045

cvss: 7.2; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.1%; EPSS 1.1% chance of exploitation in 30 days, percentile 64%
public exploits: 1; Exploit-DB

Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.

Patch / fix

links 3

sunsolve.sun.com/search/document.do?assetkey=1-26-52222-1 advisory
ciac.org/ciac/bulletins/n-113.shtml advisory
securityfocus.com/bid/7064 advisory

Timeline

2003-04-01 First public exploit (EDB-4)
2003-07-03 Published

Exploit prediction

1.06% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-4 Sun SUNWlldap Library Hostname - Local Buffer Overflow local, 2003-04-01
securityfocus.com http://www.securityfocus.com/bid/7064 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C

References

sunsolve.sun.com /search/document.do?assetkey=1-26-52222-1
vendor-advisory, patch
ciac.org /ciac/bulletins/n-113.shtml
third-party-advisory, government-resource, patch, vendor-advisory
securityfocus.com /bid/7064
vdb-entry, exploit, patch, vendor-advisory
auscert.org.au /render.html?it=3224
third-party-advisory, vendor-advisory
securitytracker.com /id?1006401
vdb-entry
exchange.xforce.ibmcloud.com /vulnerabilities/11641
vdb-entry

Sources

CVE List CVE-2003-1055
NVD CVE-2003-1055

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary