Sun Solaris ZFS Filesystem Security Bypass Vulnerability
BID:36702
Info
Sun Solaris ZFS Filesystem Security Bypass Vulnerability
| Bugtraq ID: | 36702 |
| Class: | Design Error |
| CVE: |
CVE-2009-3706 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 14 2009 12:00AM |
| Updated: | Apr 13 2015 09:06PM |
| Credit: | The vendor reported the issue. |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 |
| Not Vulnerable: |
Sun OpenSolaris build snv_118 |
Discussion
Sun Solaris ZFS Filesystem Security Bypass Vulnerability
Sun Solaris is prone to a security-bypass vulnerability that affects the ZFS filesystem.
A local attacker can exploit this issue to gain ownership of other users' files. This may result in privilege escalation and other attacks.
This issue affects the following on both SPARC and x86 platforms:
Solaris 10
OpenSolaris builds snv_100 through snv_117
Sun Solaris is prone to a security-bypass vulnerability that affects the ZFS filesystem.
A local attacker can exploit this issue to gain ownership of other users' files. This may result in privilege escalation and other attacks.
This issue affects the following on both SPARC and x86 platforms:
Solaris 10
OpenSolaris builds snv_100 through snv_117
Exploit / POC
Sun Solaris ZFS Filesystem Security Bypass Vulnerability
An attacker may use system utilities to carry out an attack.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
An attacker may use system utilities to carry out an attack.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Sun Solaris ZFS Filesystem Security Bypass Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Solution:
The vendor has released an advisory and updates. Please see the references for details.
References
Sun Solaris ZFS Filesystem Security Bypass Vulnerability
References:
References:
- Sun Homepage (Sun Microsystems )
- 265908 Vulnerability in the ZFS Filesystem (Sun)