Sun Solaris Text Editors Command Execution Vulnerability

Bugtraq ID:	31229
Class:	Design Error
CVE:	CVE-2008-4131
Remote:	Yes
Local:	No
Published:	Sep 17 2008 12:00AM
Updated:	Oct 03 2008 04:38PM
Credit:	Eli the Bearded
Vulnerable:	Sun Solaris 9_x86 Update 2 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 14.1 Avaya CMS Server 14.0 Avaya CMS Server 13.1
Not Vulnerable:

Sun Solaris Text Editors Command Execution Vulnerability

Sun Solaris text editors are prone to a command-execution vulnerability.

An attacker may leverage this issue to execute arbitrary commands with the privileges of another user on the affected computer.

Sun Solaris 8, 9, and 10 are affected.

Sun Solaris Text Editors Command Execution Vulnerability

The following example is available:

• /data/vulnerabilities/exploits/31229.txt

Sun Solaris Text Editors Command Execution Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

Sun Solaris Text Editors Command Execution Vulnerability

References:

• tags & vim (as requested by Sven, and cc'ed to him) (Eli the Bearded)
  
• ASA-2008-387 - Manipulated Tag Files used with Solaris Text Editors May Lead to (Avaya)
  
• Solution 237987: Manipulated Tag Files used with Solaris Text Editors May Lead t (Sun)