Solaris nis_cachemgr Vulnerability

Bugtraq ID:	239
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 27 1997 12:00AM
Updated:	Mar 27 1997 12:00AM
Credit:	This vulnerability was originally posted to the Bugtraq mailing list by Bill Paul <[email protected]> Thu, 27 Mar 1997. His post prompted Sun Bulletin 00155.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Solaris nis_cachemgr Vulnerability

NIS+ clients run nis_cachemgr, a utility that caches information relating to NIS+ servers. A vulnerability has been discovered that may allow an attacker user to add bogus directory objects to the global shared cache. Thus, allowing the attacker user to specify rogue NIS+ servers that are under the attackers control.

Solaris nis_cachemgr Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solaris nis_cachemgr Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.3

• Sun 101318-89
  sparc
  

Sun Solaris 2.4_x86

• Sun 101974-32
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-101974-32-1

Sun Solaris 2.4

• Sun 101973-32
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-101973-32-1

Sun Solaris 2.5_x86

• Sun 103188-29
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103188-29-1

Sun Solaris 2.5.1 _x86

• Sun 103613-32
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103613-32-1

Sun Solaris 2.5.1

• Sun 103612-33
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103612-33-1