CVE-2025-71263: Buffer Overflow
In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71263?
CVE-2025-71263 has a critical severity as it allows a local user to exploit a buffer overflow to gain root privileges.
How do I fix CVE-2025-71263?
To fix CVE-2025-71263, it is recommended to upgrade to a version of UNIX that does not have this vulnerability or implement access controls to limit the usage of the su command.
Who is affected by CVE-2025-71263?
CVE-2025-71263 affects systems running the UNIX Fourth Research Edition, particularly in lab environments where this version is still operational.
What type of vulnerability is CVE-2025-71263?
CVE-2025-71263 is classified as a buffer overflow vulnerability related to the 'su' command in UNIX.
Can CVE-2025-71263 be exploited remotely?
CVE-2025-71263 cannot be exploited remotely as it requires local access to the system to execute the 'su' command.