iDefense Security Advisory 08.04.08 – Remote exploitation of multiple format string vulnerabilities in Sun Microsystems Inc.’s snoop could allow an attacker to execute arbitrary code with the privileges of the nobody user. Multiple format string vulnerabilities exist within the code that parses and displays SMB traffic. All of the vulnerabilities are present due to unsanitized user input being passed to printf-style formatting function. This allows an attacker to overwrite arbitrary addresses with arbitrary data, which can result in the execution of arbitrary code. iDefense has confirmed the existence of these vulnerabilities in snoop for Solaris 10 8/07. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69026/08.04.08-2.txt
Source: https://packetstormsecurity.com/files/69026/iDEFENSE-Security-Advisory-2008-08-04.2.html