Sun Solaris Language Input Methods Security Vulnerability

Bugtraq ID:	27770
Class:	Unknown
CVE:	CVE-2008-0730
Remote:	No
Local:	Yes
Published:	Feb 01 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solaris Language Input Methods Security Vulnerability

Sun Solaris is prone to an unspecified security vulnerability that affects the Simplified Chinese, Traditional Chinese, Korean, and Thai language input methods.

Attackers can exploit this vulnerability to access and modify directories and files in another user's home directory.

Very few details are known regarding this issue. We will update this BID as soon as more information becomes available.

This issue affects Sun Solaris 10 for SPARC and x86 platforms.

Sun Solaris Language Input Methods Security Vulnerability

An exploit is likely not required for this issue.

Sun Solaris Language Input Methods Security Vulnerability

Solution:
The vendor released an advisory and updates to address this issue. Please see the references for more information.


Sun Solaris 10_x86

• Sun 120413-08
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120413-08-1


• Sun 120415-20
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120415-20-1

Sun Solaris Language Input Methods Security Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• Solution 201315 : Security Vulnerability in Simplified Chinese, Traditional (Sun Microsystems)