Sun Solaris XScreenSaver X Resize and Rotate Local Information Disclosure Vulnerability

Bugtraq ID:	36488
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 22 2009 12:00AM
Updated:	Sep 23 2009 03:40PM
Credit:	The vendor reported the issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01
Not Vulnerable:	Sun OpenSolaris build snv_112

Sun Solaris XScreenSaver X Resize and Rotate Local Information Disclosure Vulnerability

Solaris XScreenSaver is prone to a local information-disclosure vulnerability.

A local attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

This issue affects the following on both SPARC and x86 platforms:

Solaris 10
OpenSolaris based on builds snv_01 through snv_111

Sun Solaris XScreenSaver X Resize and Rotate Local Information Disclosure Vulnerability

An exploit is not required.

Sun Solaris XScreenSaver X Resize and Rotate Local Information Disclosure Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Sun Solaris 10_x86

• Sun 120095-26
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120095-26-1

Sun Solaris XScreenSaver X Resize and Rotate Local Information Disclosure Vulnerability

References:

• Sun Homepage (Sun Microsystems )
  
• Solution 249646: A Security Vulnerability in xscreensaver(1) May Display Portion (Sun)