SunOS rpc.cmsd Vulnerability

Bugtraq ID:	428
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 15 1994 12:00AM
Updated:	Jul 15 1994 12:00AM
Credit:	First released in Sun Advisory #00166 on March 11, 1998.
Vulnerable:	Sun SunOS 4.1.4 Sun SunOS 4.1.3 _U1 Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:

SunOS rpc.cmsd Vulnerability

The rpc.cmsd is a small database manager for appointment and resource-scheduling data. Its primary client is Calendar Manager in Openwindows, and Calendar in CDE. This vulnerability, if exploited, allows attackers to overwrite arbitrary files and gain root access.

SunOS rpc.cmsd Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

SunOS rpc.cmsd Vulnerability

Solution:
The following patches are available in relation to the above problem.

OpenWindows:

SunOS Patch ID
_____ _________

SunOS 5.5.1 sparc 104976-03
SunOS 5.5.1 x86 105124-02
SunOS 5.5 sparc 103251-07
SunOS 5.5 x86 103273-04
SunOS 5.4 sparc 102030-09
SunOS 5.4 x86 102031-07
SunOS 5.3 sparc 101513-12
SunOS 4.1.4 sparc 100523-24
SunOS 4.1.3_U1 sparc 100523-24

CDE:

CDE version Patch ID
___________ ________
1.02 103670-04
1.02_x86 103717-04
1.01 103671-04
1.01_x86 103718-04

SunOS rpc.cmsd Vulnerability

References:

• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)