Sun Solaris SysInfo Local Information Disclosure Vulnerability

Bugtraq ID:	19104
Class:	Design Error
CVE:	CVE-2006-3824
Remote:	No
Local:	Yes
Published:	Jul 21 2006 12:00AM
Updated:	Jun 27 2007 03:48AM
Credit:	The original discoverer of this vulnerability wishes to remain anonymous. iDefense reported this issue to the vendor.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Avaya Interactive Response
Not Vulnerable:

Sun Solaris SysInfo Local Information Disclosure Vulnerability

Sun Solaris is prone to a local information-disclosure vulnerability because the kernel fails to properly ensure that unintended memory is not disclosed to local users.

This issue allows local attackers to gain access to potentially sensitive kernel memory. Information harvested by exploiting this issue may aid attackers in further attacks.

Sun Solaris SysInfo Local Information Disclosure Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/prdelka-vs-SUN-sysinfo.c
• /data/vulnerabilities/exploits/raptor_sysinfo-19104.c

Sun Solaris SysInfo Local Information Disclosure Vulnerability

Solution:
Sun has released a security alert along with patches to address this issue. Please see the referenced alert for more information.


Sun Solaris 10

• Sun 118833-09
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-118833-09-1

Sun Solaris 10_x86

• Sun 118855-06
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-118855-06-1

Sun Solaris SysInfo Local Information Disclosure Vulnerability

References:

• Avaya Security Advisory ASA-2006-181 (Avaya)
  
• Solaris Product Page (Sun)
  
• Sun Alert ID: 102343 (Sun)
  
• iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel M (labs-no-reply )