Sun Sendmail Forward File Privilege Escalation Vulnerability

Bugtraq ID:	7033
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Mar 06 2003 12:00AM
Updated:	Mar 06 2003 12:00AM
Credit:	This vulnerability was announced by Sun.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0
Not Vulnerable:	Sun Solaris 2.6

Sun Sendmail Forward File Privilege Escalation Vulnerability

Sun has announced a vulnerability in Sendmail. The problem occurs due to insufficient handling of certain properties of a user's '.forward' file.

This issue could likely be exploited by an attacker to elevate privileges to that of the Sendmail daemon, typically root.

The technical details regarding this vulnerability are currently unknown. This BID will be updated as more information is made available.

Sun Sendmail Forward File Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Sendmail Forward File Privilege Escalation Vulnerability

Solution:
Fixes available:


Sun Solaris 7.0_x86

• Sun 107685-06
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=107685&rev=06

Sun Solaris 9_x86

• Sun 114137-01
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114137&rev=01

Sun Solaris 7.0

• Sun 107684-06
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=107684&rev=06

Sun Solaris 8_x86

• Sun 110616-07
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=110616&rev=07

Sun Solaris 8_sparc

• Sun 110615-07
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=110615&rev=07

Sun Solaris 9

• Sun 113575-02
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113575&rev=02

Sun Sendmail Forward File Privilege Escalation Vulnerability

References:

• Sun Alert ID: 50904 (Sun)