Sun Solaris 'libdevinfo(3LIB)' Unauthorized File Access Vulnerability

Bugtraq ID:	27253
Class:	Access Validation Error
CVE:	CVE-2008-0242
Remote:	No
Local:	Yes
Published:	Jan 11 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Avaya Interactive Response 3.0 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris 'libdevinfo(3LIB)' Unauthorized File Access Vulnerability

Sun Solaris is prone to an unauthorized file-access vulnerability.

A local attacker can exploit this issue to gain access to arbitrary files on the affected computer. Successfully exploiting this issue may grant the attacker elevated privileges on affected computers. Other attacks are also possible.

Sun Solaris 'libdevinfo(3LIB)' Unauthorized File Access Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 'libdevinfo(3LIB)' Unauthorized File Access Vulnerability

Solution:
The vendor has released an advisory with upgrades to address this issue. Please see the references for more information.

Sun Solaris 'libdevinfo(3LIB)' Unauthorized File Access Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• ASA-2008-043 A Security Vulnerability in libdevinfo(3LIB) May Allow Unauthorized (Avaya)
  
• Sun Alert ID: 103165 (Sun Microsystems)