Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable.

BUGTRAQ:20030729 Solaris ld.so.1 buffer overflow | URL:http://marc.info/?l=bugtraq&m=105951760418667&w=2 | IDEFENSE:20030729 Buffer Overflow in Sun Solaris Runtime Linker | URL:http://www.idefense.com/advisory/07.29.03.txt | OSVDB:8722 | URL:http://www.osvdb.org/8722 | OVAL:oval:org.mitre.oval:def:3601 | URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3601 | SUNALERT:55680 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55680 | XF:sun-ldso1-ldpreload-bo(12755) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/12755