Sun Solaris LPStat Unspecified Local Privilege Escalation Vulnerability

Bugtraq ID:	9225
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Dec 15 2003 12:00AM
Updated:	Dec 15 2003 12:00AM
Credit:	Vulnerability announced by Sun.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris LPStat Unspecified Local Privilege Escalation Vulnerability

Problems have been identified in the Sun Solaris lpstat program. Because of these issues, it may be possible for a local attacker to gain elevated privileges.

Sun Solaris LPStat Unspecified Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris LPStat Unspecified Local Privilege Escalation Vulnerability

Solution:
Sun has made fixes available.


Sun Solaris 2.6

• Sun 106235-14
  http://sunsolve.sun.com

Sun Solaris 7.0

• Sun 107115-13
  http://sunsolve.sun.com

Sun Solaris 8_x86

• Sun 109321-07
  http://sunsolve.sun.com

Sun Solaris 2.6_x86

• Sun 106236-13
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 109320-07
  http://sunsolve.sun.com

Sun Solaris 9

• Sun 113329-02
  http://sunsolve.sun.com

Sun Solaris 9_x86

• Sun 114980-02
  http://sunsolve.sun.com

Sun Solaris 7.0_x86

• Sun 107116-13
  http://sunsolve.sun.com

Sun Solaris LPStat Unspecified Local Privilege Escalation Vulnerability

References:

• Sun Alert ID: 57451 (Sun Microsystems)