BNLug - Sun Solaris Management Console Logging Mechanism Remote Privilege Escalation Vulnerability

Sun Solaris Management Console Logging Mechanism Remote Privilege Escalation Vulnerability

TITLE: Sun Solaris Management Console Logging Mechanism Remote Privilege Escalation Vulnerability
CLASS: Unknown
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: Jun 05 2007 12:00AM
UPDATE: Jun 05 2007 12:00AM
CREDIT: Adam Gowdiak is credited with the discovery of this issue.
VULNERABLE:

Sun Solaris 9_x86
Sun Solaris 9
Sun Solaris 8_x86
Sun Solaris 8
Sun Solaris 10_x86
Sun Solaris 10

NOT VULNERABLE:

Vai alla pagina originale su Security Focus

Discussion

Sun Solaris Management Console is prone to a remote privilege-escalation vulnerability.

Attackers can exploit this issue to gain superuser privileges. Successful attacks will result in the complete compromise of affected computers.

Exploit

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:vuldb@securityfocus.com.

Solution

Solution:
The vendor has released an advisory and patches to address this issue. Please see the references for more information.

Sun Solaris 9_x86