Sun Solaris IN.RWHOD(1M) Daemon Remote Code Execution Vulnerability

Bugtraq ID:	11840
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 07 2004 12:00AM
Updated:	Dec 07 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0
Not Vulnerable:

Sun Solaris IN.RWHOD(1M) Daemon Remote Code Execution Vulnerability

Sun Solaris in.rwhod(1M) daemon is reported prone to an unspecified vulnerability that may allow for remote code execution. The vendor disclosed this issue, however, no further details are currently available.

If successfully exploited, this vulnerability can result in an attacker gaining superuser privileges on a vulnerable computer.

This BID will be updated when more information becomes available.

Sun Solaris IN.RWHOD(1M) Daemon Remote Code Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris IN.RWHOD(1M) Daemon Remote Code Execution Vulnerability

Solution:
Sun has released patches to address this issue.


Sun Solaris 7.0_x86

• Sun 118240-01
  

Sun Solaris 9_x86

• Sun 117456-01
  

Sun Solaris 7.0

• Sun 118239-01
  

Sun Solaris 8_x86

• Sun 116985-01
  

Sun Solaris 8_sparc

• Sun 116984-01
  

Sun Solaris 9

• Sun 117455-01
  

Sun Solaris IN.RWHOD(1M) Daemon Remote Code Execution Vulnerability

References:

• Sun Alert ID: 57659 - Security Vulnerability in the in.rwhod(1M) Daemon (Sun)