Sun Solaris 10 Aggregated Network Device Local Insecure Permissions Vulnerability

Bugtraq ID:	20377
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 06 2006 12:00AM
Updated:	Oct 06 2006 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10
Not Vulnerable:

Sun Solaris 10 Aggregated Network Device Local Insecure Permissions Vulnerability

Sun Solaris 10 is prone to a local insecure-permissions vulnerability.

A local attacker may exploit this issue to create raw network sockets on aggregated network devices, resulting in unrestricted access to network packets. This may aid the attacker in further network-based attacks.

Sun Solaris 10 Aggregated Network Device Local Insecure Permissions Vulnerability

Attackers use readily available network utilities to create and use raw sockets.

Sun Solaris 10 Aggregated Network Device Local Insecure Permissions Vulnerability

Solution:
Sun has released an alert along with patches to address this issue. Please see the vendor references for information on obtaining a fix.


Sun Solaris 10

• Sun 118833-23
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118833-23-1

Sun Solaris 10_x86

• Sun 118855-19
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118855-19-1

Sun Solaris 10 Aggregated Network Device Local Insecure Permissions Vulnerability

References:

• Sun Alert ID: 102606 (Sun)
  
• Sun Solaris Home Page (Sun Microsystems)