Sun Solaris UCB/PS Command Local Information Disclosure Vulnerability

Bugtraq ID:	19662
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Mar 27 2006 12:00AM
Updated:	Aug 30 2006 10:13PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris UCB/PS Command Local Information Disclosure Vulnerability

Sun Solaris is prone to a local information-disclosure vulnerability.

This issue allows local attackers to gain access to potentially sensitive information that may aid them in further attacks.

Sun Solaris UCB/PS Command Local Information Disclosure Vulnerability

Attackers use the vulnerable command to exploit this issue.

The following proof of concept is available:

/usr/ucb/ps -auxgeww

Sun Solaris UCB/PS Command Local Information Disclosure Vulnerability

Solution:
Sun has released a security alert along with patches to address this issue. Please see the referenced alert for more information.


Sun Solaris 9_x86

• Sun 120239-01
  x86 platform
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120239-01-1

Sun Solaris 8_x86

• Sun 109024-05
  x86 platform
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109024-05-1

Sun Solaris 8_sparc

• Sun 109023-05
  SPARC platform
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109023-05-1

Sun Solaris 9

• Sun 120240-01
  SPARC platform
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120240-01-1

Sun Solaris UCB/PS Command Local Information Disclosure Vulnerability

References:

• 102215 - Security Vulnerability With The 'usr/ucb/ps' Command (Sun)