Sun Solaris PFExec Custom Profile Arbitrary Privileges Vulnerability

Bugtraq ID:	9534
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 30 2004 12:00AM
Updated:	Jan 30 2004 12:00AM
Credit:	Vulnerability announced by Sun Microsystems.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris PFExec Custom Profile Arbitrary Privileges Vulnerability

A problem in pfexec included with Sun Solaris has been identified. Because of this issue, it may be possible for a local user to gain elevated privileges.

Sun Solaris PFExec Custom Profile Arbitrary Privileges Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris PFExec Custom Profile Arbitrary Privileges Vulnerability

Solution:
Sun has made fixes available:


Sun Solaris 9_x86

• Sun 116238-01
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109008&rev=15

Sun Solaris 8_x86

• Sun 109008-15
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109008&rev=15

Sun Solaris 8_sparc

• Sun 109007-15
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109007&rev=15

Sun Solaris 9

• Sun 116237-01
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=116237&rev=01

Sun Solaris PFExec Custom Profile Arbitrary Privileges Vulnerability

References:

• Sun Alert ID: 57453 (Sun)