sastcpd is a "Job Spawner" included with the base installation of the SAS Software infrastructure. It is available for various platforms, including Unix, Linux, and Microsoft operating systems. If the environment variable 'netencralg' is defined, sastcpd will issue a segmentation fault when executed. This is the result of memory corrupt. It may be possible to exploit this vulnerability to execute arbitrary code, although this has not been confirmed. sastcpd runs suid root by default. This vulnerability has been confirmed under SunOS, although other versions may share this vulnerability.
sastcpd is a "Job Spawner" included with the base installation of the SAS Software infrastructure. It is available for various platforms, including Unix, Linux, and Microsoft operating systems. If the environment variable 'netencralg' is defined, sastcpd will issue a segmentation fault when executed. This is the result of memory corrupt. It may be possible to exploit this vulnerability to execute arbitrary code, although this has not been confirmed. sastcpd runs suid root by default. This vulnerability has been confirmed under SunOS, although other versions may share this vulnerability.