SunView selection_svc Vulnerability

Bugtraq ID:	8
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 14 1990 12:00AM
Updated:	Aug 14 1990 12:00AM
Credit:	Vulnerability discovered by Peter Shipley.
Vulnerable:	Sun SunOS 4.1.1 Sun SunOS 4.1 Sun SunOS 4.0.3 Sun SunOS 4.0.2 Sun SunOS 4.0.1 Sun SunOS 4.0 Sun SunOS 3.5
Not Vulnerable:

SunView selection_svc Vulnerability

On Sun3 and Sun4 systems, a remote system can read any file that is readable to the user running SunView. On the 386i, a remote system can read any file on the workstation running SunView regardless of protections. Note that if root runs Sunview, all files are potentially accessible by a remote system.

Sunview does not kill the selection_svc process when the user quits from Sunview. Thus, unless the process is killed, remote systems can still read files that were readable to the last user that ran Sunview. Under these circumstances, once a user has run Sunview, start using another window system (such as X11), or even logoff, but still have files accessible to remote systems.

This is Sun BugId 1039576

SunView selection_svc Vulnerability

x

• /data/vulnerabilities/exploits/seln_hold_file.c

SunView selection_svc Vulnerability

Solution:
Apply Sun Patch-ID# 100085-03.

SunView selection_svc Vulnerability

References:

• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)