A buffer overflow vulnerability in the UNIX v4 su command allows local users to gain unauthorized root privileges, posing a severe security risk to affected systems.

The vulnerability is a classic buffer overflow (CWE-120) located within the password handling logic of the su command. An attacker with local access can trigger this flaw by providing an input exceeding the 100-byte fixed buffer size, resulting in arbitrary code execution with elevated root privileges.

Successful exploitation grants an attacker full administrative control over the affected system, leading to complete compromise of confidentiality, integrity, and availability. While the CVSS score of 7.4 indicates a high severity, the practical impact is limited by the legacy nature of the software, which is primarily restricted to historical or research environments.

Immediate Action: As this software is no longer supported by the maintainer, no official patch exists; organizations should isolate or decommission any remaining instances of UNIX v4 immediately.

Proactive Monitoring: Audit local system access logs for suspicious activity involving the su command, specifically looking for abnormally long input strings or unexpected process crashes.

Compensating Controls: Restrict local shell access to the host and implement strict physical access controls to prevent unauthorized users from interacting with the vulnerable environment.

Public Exploit Available: Unknown.

Given the age and unsupported status of UNIX v4, remediation through patching is not possible. Security teams should prioritize the total removal of this legacy software from their infrastructure, as it cannot be secured against modern exploitation techniques. If the environment must be maintained for archival purposes, it should be fully air-gapped from production networks to eliminate the risk of unauthorized access.