Sun Solaris C Library Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	13856
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 04 2005 12:00AM
Updated:	Jun 04 2005 12:00AM
Credit:	The vendor announced this vulnerability.
Vulnerable:	Sun Solaris 10
Not Vulnerable:

Sun Solaris C Library Unspecified Privilege Escalation Vulnerability

Sun Solaris C Library is prone to an unspecified privilege escalation vulnerability.

This vulnerability is due to an unspecified security issue in the C Library (libc(3LIB)) and libproject(3LIB).

This issue affects the Solaris 10 operating system.

Sun Solaris C Library Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris C Library Unspecified Privilege Escalation Vulnerability

Solution:
The vendor has addressed this issue in patch 119689-02 for the SPARC platform and in patch 118345-03 for the x86 platform. Please see the referenced Sun alert notification #101740 for further information.


Sun Solaris 10

• Sun 118345-03
  http://sunsolve.sun.com


• Sun 119689-02
  http://sunsolve.sun.com

Sun Solaris C Library Unspecified Privilege Escalation Vulnerability

References:

• Solaris[tm] Product Line (Sun Microsystems)
  
• Sun Alert ID: 101740 (Sun Microsystems)