Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.

BUGTRAQ:20030331 NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability | URL:http://www.securityfocus.com/archive/1/316957/30/25250/threaded | CIAC:N-068 | URL:http://www.ciac.org/ciac/bulletins/n-068.shtml | MISC:http://packetstormsecurity.org/0304-advisories/sa2003-02.txt | MISC:http://www.nsfocus.com/english/homepage/sa2003-02.htm | OSVDB:8713 | URL:http://www.osvdb.org/8713 | OVAL:oval:org.mitre.oval:def:4383 | URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4383 | SUNALERT:52443 | URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-52443-1 | VULNWATCH:20030331 NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability | URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0162.html