BID:10261

Sun Solaris Patch Information Disclosure Vulnerability

Info

Sun Solaris Patch Information Disclosure Vulnerability

Bugtraq ID:	10261
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Apr 30 2004 12:00AM
Updated:	Apr 30 2004 12:00AM
Credit:	This issue was disclosed by Sun.
Vulnerable:	Sun Patch 114342-05 + Sun Solaris 9_x86 Sun Patch 114342-04 + Sun Solaris 9_x86 Sun Patch 114342-03 + Sun Solaris 9_x86 Sun Patch 114342-02 + Sun Solaris 9_x86 Sun Patch 113579-05 + Sun Solaris 9 Sun Patch 113579-04 + Sun Solaris 9 Sun Patch 113579-03 + Sun Solaris 9 Sun Patch 113579-02 + Sun Solaris 9

Not Vulnerable:

Discussion

Sun Solaris Patch Information Disclosure Vulnerability

Sun has announced that some patches released for Solaris may in fact present a new security vulnerability. The issue presents itself in Solaris 9 systems running as NIS servers containing secure maps and patches 113579-02 through 113579-05 (for SPARC) or 114342-02 through 114342-05 (for x86) installed.

Successful exploitation of this issue could result in an attacker disclosing sensitive information that could be used to launch further attacks against a vulnerable system.

Exploit / POC

Sun Solaris Patch Information Disclosure Vulnerability

An exploit for this issue is not applicable.

Solution / Fix

Sun Solaris Patch Information Disclosure Vulnerability

Solution:
Sun has released preliminary T-patches to address this issue.

Sun has released patches to address this issue.

Sun Patch 113579-02