Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerability

Bugtraq ID:	11459
Class:	Design Error
CVE:	CVE-2004-1353
Remote:	No
Local:	Yes
Published:	Oct 19 2004 12:00AM
Updated:	Jul 12 2009 08:06AM
Credit:	The individual or individuals responsible for disclosure of these issues are currently unknown; these issues were disclosed in the referenced vendor security alert.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerability

Sun Solaris is affected by a local privilege escalation vulnerability due to LDAP and RBAC implementation issues. The problem likely presents itself due to a design error.

A local attacker may exploit this issue to gain superuser privileges on an affected computer.

Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerability

Solution:
Sun has released Sun Alert ID: 57657 along with patches dealing with this issue. Please see the referenced advisory for more information.


Sun Solaris 9_x86

• Sun 114328-04
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-114328-04-1

Sun Solaris 8_x86

• Sun 108994-38
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-108994-38-1

Sun Solaris 8_sparc

• Sun 108993-38
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-108993-38-1

Sun Solaris 9

• Sun 108994-38
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-108994-38-1


• Sun 112960-17
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-17-1

Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerability

References:

• Sun Alert ID: 57657 - Security Vulnerability When Using LDAP In Conjunction With (Sun)