Sun StorEdge Sparse File Information Disclosure Vulnerability

Bugtraq ID:	11559
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jul 01 2004 12:00AM
Updated:	Jul 01 2004 12:00AM
Credit:	This vulnerability was disclosed by the vendor.
Vulnerable:	Sun Utilization Suite 4.1 Sun Utilization Suite 4.0 Sun Performance Suite 4.1 Sun Performance Suite 4.0
Not Vulnerable:

Sun StorEdge Sparse File Information Disclosure Vulnerability

It is reported that StorEdge QFS and SAM-FS are both susceptible to a sparse file information disclosure vulnerability.

Malicious users with access to the affected filesystems may exploit this vulnerability to gain access to potentially sensitive information contained in previously deleted files. This may aid them in further attacks.

Sun StorEdge Sparse File Information Disclosure Vulnerability

An exploit is not required.

Sun StorEdge Sparse File Information Disclosure Vulnerability

Solution:
Sun has released an alert (Sun Alert ID 57595) documenting this vulnerability. Please see the referenced alert for further information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun StorEdge Sparse File Information Disclosure Vulnerability

References:

• Sun Alert ID: 57595 - Sparse Files Written to Shared Sun StorEdge QFS or Sun St (Sun Microsystems)
  
• Sun StorEdge QFS Software Home Page (Sun Microsystems)
  
• Sun StorEdge SAM-FS Software Home Page (Sun Microsystems)