Sun Solaris Xsun and Xprt Local Privilege Escalation Vulnerability

Bugtraq ID:	14949
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Sep 26 2005 12:00AM
Updated:	Sep 26 2005 12:00AM
Credit:	Discovery is credited to Eric Sheridan of Towson University.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 10.0_x86 Sun Solaris 10 Avaya Interactive Response 1.3 Avaya Interactive Response 1.2.1 Avaya Interactive Response Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 9.0 Avaya CMS Server 8.0
Not Vulnerable:

Sun Solaris Xsun and Xprt Local Privilege Escalation Vulnerability

Sun Solaris is prone to a vulnerability that may let attackers gain elevated privileges through execution of arbitrary code. This vulnerability is exposed through the Xsun and Xprt commands.

Sun Solaris Xsun and Xprt Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris Xsun and Xprt Local Privilege Escalation Vulnerability

Solution:
Sun has released patches to address this issue. Patches for Solaris 7.0 are pending released.

Avaya has released advisory ASA-2005-220 detailing vulnerable Avaya products. Please see the referenced advisory for further information.


Sun Solaris 9

• Sun 112785-50
  

Sun Solaris 9_x86

• Sun 112786-39
  

Sun Solaris 10.0_x86

• Sun 119060-05
  

Sun Solaris 8_x86

• Sun 108653-82
  

Sun Solaris 8_sparc

• Sun 108652-93
  

Sun Solaris 10

• Sun 119059-05
  

Sun Solaris Xsun and Xprt Local Privilege Escalation Vulnerability

References:

• ASA-2005-220 - Sun Alert Notifications from Sun Summary Report dated October 1, (Avaya)
  
• Sun Alert ID: 101800 Security Vulnerability in the Xsun(1) and Xprt(1) Commands (Sun)