SCO UnixWare Reliant HA 'RELIANT_PATH' Local Input Validation Vulnerability

Bugtraq ID:	28624
Class:	Input Validation Error
CVE:	CVE-2008-6558
Remote:	No
Local:	Yes
Published:	Apr 04 2008 12:00AM
Updated:	May 07 2015 05:30PM
Credit:	qaaz
Vulnerable:	SCO Reliant HA 1.1.4 + SCO Unixware 7.1.4
Not Vulnerable:

SCO UnixWare Reliant HA 'RELIANT_PATH' Local Input Validation Vulnerability

SCO UnixWare Reliant HA is prone to a local input-validation vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can leverage this issue to execute arbitrary code with superuser privileges. Successful attacks will completely compromise affected computers.

Reliant HA 1.1.4 is vulnerable; other versions may also be affected.

SCO UnixWare Reliant HA 'RELIANT_PATH' Local Input Validation Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/28624.c

SCO UnixWare Reliant HA 'RELIANT_PATH' Local Input Validation Vulnerability

Solution:
The vendor has released an advisory and fixes to address this issue. Please see the references for more information.


SCO Reliant HA 1.1.4

• SCO p534850.image
  ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.image

SCO UnixWare Reliant HA 'RELIANT_PATH' Local Input Validation Vulnerability

References:

• Vendor Homepage (SCO)
  
• SCOSA-2008.3 - ReliantHA local root exploit Vulnerability (SCO)