Sun Solaris Printd Arbitrary File Deletion Vulnerability
BID:14510
Info
Sun Solaris Printd Arbitrary File Deletion Vulnerability
| Bugtraq ID: | 14510 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Aug 09 2005 12:00AM |
| Updated: | Aug 09 2005 12:00AM |
| Credit: | Discovery is credited to H.D. Moore of Metaspoilt.com. |
| Vulnerable: |
Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 10.0_x86 Sun Solaris 10 Avaya Interactive Response 1.3 Avaya Interactive Response 1.2.1 Avaya Interactive Response Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 9.0 Avaya CMS Server 8.0 |
| Not Vulnerable: | |
Discussion
Sun Solaris Printd Arbitrary File Deletion Vulnerability
Sun Solaris printd is affected by an arbitrary file deletion vulnerability. It was reported that a remote or local attacker can delete arbitrary files on a computer with the privileges of printd.
If an attacker is able to delete sensitive files, this issue may lead to a denial of service condition.
Sun Solaris printd is affected by an arbitrary file deletion vulnerability. It was reported that a remote or local attacker can delete arbitrary files on a computer with the privileges of printd.
If an attacker is able to delete sensitive files, this issue may lead to a denial of service condition.
Exploit / POC
Sun Solaris Printd Arbitrary File Deletion Vulnerability
The following metasploit exploit is available:
The following metasploit exploit is available:
Solution / Fix
Sun Solaris Printd Arbitrary File Deletion Vulnerability
Solution:
Sun has released advisory (101842) including fixes to address this issue.
Avaya has released advisory ASA-2005-165 to identify vulnerable Avaya packages. Avaya recommends that users running CMS V9, V10, V11 should install Sun patch 109320-16 or later. CMS R12, R13 requires the installation of Sun patch 113329-15 or later to address this issue. Avaya is currently certifying Patches for Avaya IR and more information will be released in the near future.
Sun Solaris 7.0
Sun Solaris 9_x86
Sun Solaris 7.0_x86
Sun Solaris 10.0_x86
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 10
Solution:
Sun has released advisory (101842) including fixes to address this issue.
Avaya has released advisory ASA-2005-165 to identify vulnerable Avaya packages. Avaya recommends that users running CMS V9, V10, V11 should install Sun patch 109320-16 or later. CMS R12, R13 requires the installation of Sun patch 113329-15 or later to address this issue. Avaya is currently certifying Patches for Avaya IR and more information will be released in the near future.
Sun Solaris 7.0
Sun Solaris 9_x86
Sun Solaris 7.0_x86
Sun Solaris 10.0_x86
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 10
References
Sun Solaris Printd Arbitrary File Deletion Vulnerability
References:
References: