Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
BID:5695
Info
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
| Bugtraq ID: | 5695 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 11 2002 12:00AM |
| Updated: | Sep 11 2002 12:00AM |
| Credit: | Vulnerability discovery credited to Charles Stevenson <[email protected]>. |
| Vulnerable: |
Sun Cobalt RaQ4 RAID 3100R Sun Cobalt RaQ4 3001R Sun Cobalt RaQ XTR 3500R Sun Cobalt Qube3 w/Caching 4010WG Sun Cobalt Qube3 w/ Caching and RAID 4100WG Sun Cobalt Qube3 4000WG Sun Cobalt Control Station 4100CS |
| Not Vulnerable: | |
Discussion
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in /usr/lib/authenticate.
Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in /usr/lib/authenticate.
Exploit / POC
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
An exploit has been released by core.
An exploit has been released by core.
Solution / Fix
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
Solution:
Sun has released upgrades which address this issue.
Sun Cobalt RaQ4 3001R
Sun Cobalt RaQ XTR 3500R
Sun Cobalt Qube3 4000WG
Sun Cobalt Qube3 w/ Caching and RAID 4100WG
Sun Cobalt Qube3 w/Caching 4010WG
Sun Cobalt RaQ4 RAID 3100R
Solution:
Sun has released upgrades which address this issue.
Sun Cobalt RaQ4 3001R
-
Sun RaQ4-All-Security-2.0.1-2-15787.pkg
http://ftp.cobalt.sun.com/pub/packages/raq4/eng/RaQ4-All-Security-2.0. 1-2-15787.pkg
Sun Cobalt RaQ XTR 3500R
-
Sun RaQXTR-All-Security-1.0.1-15787.pkg
http://ftp.cobalt.sun.com/pub/packages/raqxtr/eng/RaQXTR-All-Security- 1.0.1-15787.pkg
Sun Cobalt Qube3 4000WG
-
Sun Qube3-All-Security-4.0.1-15787.pkg
http://ftp.cobalt.sun.com/pub/packages/qube3/ml/Qube3-All-Security-4.0 .1-15787.pkg
Sun Cobalt Qube3 w/ Caching and RAID 4100WG
-
Sun Qube3-All-Security-4.0.1-15787.pkg
http://ftp.cobalt.sun.com/pub/packages/qube3/ml/Qube3-All-Security-4.0 .1-15787.pkg
Sun Cobalt Qube3 w/Caching 4010WG
-
Sun Qube3-All-Security-4.0.1-15787.pkg
http://ftp.cobalt.sun.com/pub/packages/qube3/ml/Qube3-All-Security-4.0 .1-15787.pkg
Sun Cobalt RaQ4 RAID 3100R
-
Sun RaQ4-All-Security-2.0.1-2-15787.pkg
http://ftp.cobalt.sun.com/pub/packages/raq4/eng/RaQ4-All-Security-2.0. 1-2-15787.pkg
References
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
References:
References:
- Sun Alert ID: 46988 (Sun Microsystems)