rpc.cmsd overflow
advICE :Intrusions : 2001717

Summary

An attempt to overflow a buffer on the Calendar Manager service has been detected. This can be used to execute arbitrary commands on the attacked system.

Details

The rpc.cmsd is a calender/appointment scheduler service. It is enabled by default on Sun Solaris machines. It can be accessed through the "Calendar Manager" on the older Openwindows environment, or through the "Calender" program in the newer CDE environment.

A buffer overflow exploit in this service was responsible for widespread web-site defacements and DDoS attacks during the later part of 1999 and early 2000.

 
Version appeared: 1.8.6