Sun Fire Unauthorized Environmental Monitoring Subsystem Modification Vulnerability

Bugtraq ID:	5288
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jul 22 2002 12:00AM
Updated:	Jul 22 2002 12:00AM
Credit:	Published in Sun Alert ID 43908.
Vulnerable:	Sun Sun Fire V880 Sun Sun Fire V480 Sun Sun Fire 280R
Not Vulnerable:

Sun Fire Unauthorized Environmental Monitoring Subsystem Modification Vulnerability

Sun Fire products are general purpose server hardware platforms which can be used for a variety of applications. Some Sun Fire systems include an environmental monitoring subsystem which provides feedback on the device.

It may be possible for a malicious, unprivileged local user to issue commands to the environmental monitoring system, creating a denial of service condition.

This vulnerability has been reported in Sun Fire 280R, V880, and V480 systems used with Solaris 8. Reportedly, Solaris 9 does not suffer from this issue.

Sun Fire Unauthorized Environmental Monitoring Subsystem Modification Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Fire Unauthorized Environmental Monitoring Subsystem Modification Vulnerability

Solution:
A patch is available:


Sun Sun Fire 280R

• Sun 110460-20
  for Solaris 8.
  http://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=110460&method= f

Sun Sun Fire V880

• Sun 110460-20
  for Solaris 8.
  http://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=110460&method= f

Sun Sun Fire V480

• Sun 110460-20
  for Solaris 8.
  http://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=110460&method= f

Sun Fire Unauthorized Environmental Monitoring Subsystem Modification Vulnerability

References:

• Sun Alert ID: 43908 (Sun Microsystems)