Sun Solaris Text Editor ed Temporary File Creation Vulnerability

Bugtraq ID:	9199
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 11 2003 12:00AM
Updated:	Dec 11 2003 12:00AM
Credit:	The disclosure of this issue has been credited to Sun.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9

Sun Solaris Text Editor ed Temporary File Creation Vulnerability

It has been reported that Sun Solaris Text Editor ed may allow an attacker to overwrite or create any file created by root on the system. A local user may be able to exploit this issue by creating malicious symbolic links.

Sun Solaris Text Editor ed Temporary File Creation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris Text Editor ed Temporary File Creation Vulnerability

Solution:
Sun has released an advisory 57443 containing fixes to address this issue. Please see the referenced advisory for more information.


Sun Solaris 7.0_x86

• Sun 115566-01
  https://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=115566&method =hs

Sun Solaris 2.6

• Sun 115563-01
  https://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=115563&method =hs

Sun Solaris 7.0

• Sun 115565-01
  https://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=115565&method =hs

Sun Solaris 8_x86

• Sun 110904-07
  https://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=110904&method =hs

Sun Solaris 2.6_x86

• Sun 115564-01
  https://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=115564&method =hs

Sun Solaris 8_sparc

• Sun 110903-07
  https://sunsolve.sun.com/pub-cgi/patchDownload.pl?target=110903&method =hs

Sun Solaris Text Editor ed Temporary File Creation Vulnerability

References:

• Sun Alert ID: 57443 (Sun)