Sun Solaris XSun Direct Graphics Access Insecure Temporary File Vulnerability

Bugtraq ID:	9147
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 03 2003 12:00AM
Updated:	Dec 03 2003 12:00AM
Credit:	Vulnerability disclosed by Sun Microsystems.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris XSun Direct Graphics Access Insecure Temporary File Vulnerability

A problem has been identified in the Sun Solaris Xsun server when using Direct Graphics Access functions. This may make it possible for an attacker to overwrite sensitive files, resulting in data destruction, denial of service or privilege escalation.

Sun Solaris XSun Direct Graphics Access Insecure Temporary File Vulnerability

No exploit is required for this vulnerability.

Sun Solaris XSun Direct Graphics Access Insecure Temporary File Vulnerability

Solution:
Sun has made fixes for this issue available:


Sun Solaris 2.6

• Sun 105633-64
  http://sunsolve.sun.com

Sun Solaris 7.0

• Sun 108376-44
  http://sunsolve.sun.com

Sun Solaris 8_x86

• Sun 108653-61
  http://sunsolve.sun.com

Sun Solaris 2.6_x86

• Sun 106248-49
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 108652-72
  http://sunsolve.sun.com

Sun Solaris 9

• Sun 112785-25
  http://sunsolve.sun.com

Sun Solaris 9_x86

• Sun 112786-15
  http://sunsolve.sun.com

Sun Solaris 7.0_x86

• Sun 108377-39
  http://sunsolve.sun.com

Sun Solaris XSun Direct Graphics Access Insecure Temporary File Vulnerability

References:

• Sun Alert ID: 57419 (Sun Microsystems)