Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation Vulnerability
BID:32921
Info
Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation Vulnerability
| Bugtraq ID: | 32921 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 18 2008 12:00AM |
| Updated: | Dec 19 2008 02:01PM |
| Credit: | Mike Gerdts |
| Vulnerable: |
Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_100 |
| Not Vulnerable: |
Sun OpenSolaris build snv_105 |
Discussion
Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation Vulnerability
Sun Solaris Name Service Cache Daemon ('nscd(1M)') is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to obtain sensitive information and elevated privileges. Successfully exploiting this issue may result in the complete compromise of affected computers.
Sun Solaris Name Service Cache Daemon ('nscd(1M)') is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to obtain sensitive information and elevated privileges. Successfully exploiting this issue may result in the complete compromise of affected computers.
Exploit / POC
Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation Vulnerability
Solution:
Sun has released patches and an advisory. Please see the references for more information.
Solution:
Sun has released patches and an advisory. Please see the references for more information.
References
Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation Vulnerability
References:
References:
- Sun Solaris Homepage (Sun Microsystems)
- 242006 A Security Vulnerability in the Solaris Name Service Cache Daemon (nscd(1 (Sun)