OSVDB ID: 19699

Title: Solaris Xsun Unspecified Local Privilege Escalation

Info

Disclosure

Sep 26, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Solaris contains a flaw related to the Xsun program that may allow an attacker to escalate privileges. No further details have been provided.

Classification

Location: Local Access Required
Attack Type: Attack Type Unknown
Impact: Loss of Integrity
Exploit: Exploit Unknown

Solution

Sun Microsystems, Inc. has released patches to address this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): remove the setuid and setgid bit from the permissions of Xsun.

Products

Sun Microsystems, Inc.

Solaris (SPARC)

7
8 without patch 108652-93
9 without patch 112785-50
10 without patch 119059-05

Solaris (x86)

7
8 without patch 108653-82
9 without patch 112786-39
10 without patch 119060-05

References

Credit

  • Eric Sheridan - Towson University


Direct URL: http://osvdb.org/19699