Solaris rlogind FTP bounce Vulnerability

Bugtraq ID:	240
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 28 1997 12:00AM
Updated:	Oct 28 1997 12:00AM
Credit:	This vulnerability was originally released as Sun Bulletin 00156 on October 28. 1997.
Vulnerable:	Sun SunOS 4.1.4 Sun SunOS 4.1.3 _U1 Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Solaris rlogind FTP bounce Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solaris rlogind FTP bounce Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.4_x86

• Sun 101946-45
  x86
  

Sun Solaris 2.5

• Sun 103577-06
  sparc
  


• Sun 104933-01
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104933-01-1


• Sun 104934-01
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104934-01-1

Sun Solaris 2.3

• Sun 104938-01
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104938-01-1

Sun Solaris 2.5_x86

• Sun 103578-06
  x86
  

Sun Solaris 2.4

• Sun 101945-51
  sparc
  

Sun Solaris 2.5.1 _x86

• Sun 103604-05
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103604-05-1


• Sun 104936-01
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104936-01-1

Sun Solaris 2.5.1

• Sun 103603-05
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103603-05-1


• Sun 104935-01
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104935-01-1

Sun SunOS 4.1.4

• Sun 104477-03
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-104477-03-1