Sun Solaris Gnome Assistive Technology XScreenSaver Local Arbitrary Command Execution Vulnerability

Bugtraq ID:	24314
Class:	Access Validation Error
CVE:	CVE-2007-3069
Remote:	No
Local:	Yes
Published:	Jun 04 2007 12:00AM
Updated:	Jul 03 2007 06:47PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris Gnome Assistive Technology XScreenSaver Local Arbitrary Command Execution Vulnerability

Sun Solaris, running Gnome sessions with Assistive Technology and xscreensaver, is prone to a local arbitrary-command-execution vulnerability.

An attacker can exploit this issue to execute arbitrary commands with the privileges of the user running xscreensaver.

Sun Solaris Gnome Assistive Technology XScreenSaver Local Arbitrary Command Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sun Solaris Gnome Assistive Technology XScreenSaver Local Arbitrary Command Execution Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue. Please see the references for more information.


Sun Solaris 10

• Sun 120094-11
  http://sunsolve.sun.com/private-cgi/pdownload.pl?target=120094-11&meth od=hs

Sun Solaris Gnome Assistive Technology XScreenSaver Local Arbitrary Command Execution Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• 102834 - A Security Vulnerability in How xscreensaver(1) Interacts With GNOME As (Sun)
  
• ASA-2007-247 A Security Vulnerability in How xscreensaver(1) Interacts With GNOM (Avaya)