Sun LPAdmin Unspecified Arbitrary Local File Overwrite Vulnerability
BID:13968
Info
Sun LPAdmin Unspecified Arbitrary Local File Overwrite Vulnerability
| Bugtraq ID: | 13968 |
| Class: | Unknown |
| CVE: |
CVE-2005-2032 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 16 2005 12:00AM |
| Updated: | Jul 12 2009 04:06PM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Sun SunOS 5.9 _x86 Sun SunOS 5.9 Sun SunOS 5.8 _x86 Sun SunOS 5.8 Sun SunOS 5.7 _x86 Sun SunOS 5.7 Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.8 Sun Solaris 2.7_sparc Sun Solaris 2.7 Avaya Interactive Response 1.3 Avaya Interactive Response 1.2.1 Avaya Interactive Response Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 9.0 Avaya CMS Server 8.0 |
| Not Vulnerable: | |
Discussion
Sun LPAdmin Unspecified Arbitrary Local File Overwrite Vulnerability
Sun lpadmin is susceptible to an unspecified arbitrary local file overwrite vulnerability.
This vulnerability allows local, unprivileged attackers to overwrite arbitrary files. This likely allows users to crash services, or possibly the whole computer, denying service to legitimate users. It is conjectured that it may also be possible to utilize this vulnerability to gain administrative privileges.
No further details were provided. This BID will be updated as new information is disclosed.
Sun lpadmin is susceptible to an unspecified arbitrary local file overwrite vulnerability.
This vulnerability allows local, unprivileged attackers to overwrite arbitrary files. This likely allows users to crash services, or possibly the whole computer, denying service to legitimate users. It is conjectured that it may also be possible to utilize this vulnerability to gain administrative privileges.
No further details were provided. This BID will be updated as new information is disclosed.
Exploit / POC
Sun LPAdmin Unspecified Arbitrary Local File Overwrite Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun LPAdmin Unspecified Arbitrary Local File Overwrite Vulnerability
Solution:
The vendor has released Sun Alert ID 101768, along with patches to address this issue.
Avaya has released advisory ASA-2005-149 to address this issue in affected products. Avaya recommends that users install Sun patch 109320-14 to address this issue in CMS V9/V11 and IR. Sun patch 113329-13 should be installed to address this issue in CMS R12.
Sun Solaris 7.0
Sun Solaris 9
Sun Solaris 9_x86 Update 2
Sun Solaris 7.0_x86
Sun Solaris 9_x86
Sun Solaris 2.7
Sun Solaris 8_x86
Sun Solaris 2.7_sparc
Sun Solaris 8_sparc
Sun SunOS 5.7 _x86
Sun SunOS 5.7
Sun SunOS 5.8
Sun SunOS 5.8 _x86
Sun SunOS 5.9
Sun SunOS 5.9 _x86
Solution:
The vendor has released Sun Alert ID 101768, along with patches to address this issue.
Avaya has released advisory ASA-2005-149 to address this issue in affected products. Avaya recommends that users install Sun patch 109320-14 to address this issue in CMS V9/V11 and IR. Sun patch 113329-13 should be installed to address this issue in CMS R12.
Sun Solaris 7.0
-
Sun 107116-18
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107116-18-1
Sun Solaris 9
-
Sun 113329-07
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113329-07-1 -
Sun 114980-09
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-114980-09-1
Sun Solaris 9_x86 Update 2
-
Sun 113329-07
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113329-07-1 -
Sun 114980-09
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-114980-09-1
Sun Solaris 7.0_x86
-
Sun 107116-18
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107116-18-1
Sun Solaris 9_x86
-
Sun 113329-07
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113329-07-1 -
Sun 114980-09
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-114980-09-1
Sun Solaris 2.7
-
Sun 107115-18
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107115-18-1
Sun Solaris 8_x86
-
Sun 109320-14
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-14-1 -
Sun 109321-14
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109321-14-1
Sun Solaris 2.7_sparc
-
Sun 107115-18
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107115-18-1
Sun Solaris 8_sparc
-
Sun 109320-14
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-14-1 -
Sun 109321-14
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109321-14-1
Sun SunOS 5.7 _x86
-
Sun 107115-18
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107115-18-1 -
Sun 107116-18
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107116-18-1
Sun SunOS 5.7
-
Sun 107115-18
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107115-18-1 -
Sun 107116-18
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-107116-18-1
Sun SunOS 5.8
-
Sun 109320-14
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-14-1 -
Sun 109321-14
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109321-14-1
Sun SunOS 5.8 _x86
-
Sun 109320-14
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-14-1 -
Sun 109321-14
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109321-14-1
Sun SunOS 5.9
-
Sun 113329-07
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113329-07-1 -
Sun 114980-09
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-114980-09-1
Sun SunOS 5.9 _x86
-
Sun 113329-07
SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113329-07-1 -
Sun 114980-09
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-114980-09-1
References
Sun LPAdmin Unspecified Arbitrary Local File Overwrite Vulnerability
References:
References: