CVE:CVE-2001-0652
CNNVD:CNNVD-200110-126
Solaris 2.6版本到8版本的xlock存在堆溢出漏洞。本地用户可以借助超长(1)XFILESEARCHPATH或(2)XUSERFILESEARCHPATH环境变量提升根特权。
solution:Upgrade sun sunos to a higher version than 5.9,and avoid the version (,5.9]