Sun Solaris Print Service Unspecified Remote Code Execution Vulnerability
BID:29135
Info
Sun Solaris Print Service Unspecified Remote Code Execution Vulnerability
| Bugtraq ID: | 29135 |
| Class: | Unknown |
| CVE: |
CVE-2008-2144 |
| Remote: | Yes |
| Local: | No |
| Published: | May 10 2008 12:00AM |
| Updated: | Jul 15 2008 10:19PM |
| Credit: | This issue was disclosed in the referenced vendor advisory. |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10 Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service Media Processing Server 0 Nortel Networks Self-Service - CCSS7 0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 14.0 Avaya CMS Server 13.1 |
| Not Vulnerable: | |
Discussion
Sun Solaris Print Service Unspecified Remote Code Execution Vulnerability
Sun Solaris Print Service is prone to an unspecified remote code-execution vulnerability.
This issue allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges on affected computers. Failed exploit attempts will result in denial-of-service conditions.
No further technical details are currently available. We will update this BID as more information emerges.
Sun Solaris Print Service is prone to an unspecified remote code-execution vulnerability.
This issue allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges on affected computers. Failed exploit attempts will result in denial-of-service conditions.
No further technical details are currently available. We will update this BID as more information emerges.
Exploit / POC
Sun Solaris Print Service Unspecified Remote Code Execution Vulnerability
The following exploit for Immunity CANVAS is available:
https://www.immunityinc.com/downloads/immpartners/sol_printer_conf.tar.gz
The following exploit for Immunity CANVAS is available:
https://www.immunityinc.com/downloads/immpartners/sol_printer_conf.tar.gz
Solution / Fix
Sun Solaris Print Service Unspecified Remote Code Execution Vulnerability
Solution:
The vendor has released updates to address this issue. See the referenced advisory for more information.
Solution:
The vendor has released updates to address this issue. See the referenced advisory for more information.
References
Sun Solaris Print Service Unspecified Remote Code Execution Vulnerability
References:
References:
- Solaris Homepage (Sun Microsystems)
- ASA-2008-216 - Security Vulnerabilities in Solaris Print Service May Lead to Den (Avaya)
- Nortel Response to Sun Alert 236884 - Solaris Print Service DoS or Execution of (Nortel Networks)
- Solution 236884 : Security Vulnerabilities in Solaris Print Service May Lead (Sun)