Sun Solaris pkgadd Insecure File Permissions - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Sun Solaris pkgadd Insecure File Permissions

Secunia Advisory:	SA21633
Release Date:	2006-08-28
Last Update:	2006-09-05

Critical:	Less critical
Impact:	Manipulation of data Privilege escalation
Where:	Local system
Solution Status:	Vendor Patch

OS:	Sun Solaris 10


CVE reference:	CVE-2006-4439 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A security issue has been reported in Sun Solaris, which can be exploited by malicious, local users to disclose sensitive information or gain escalated privileges. The security issue is caused due to an error in pkgadd, which may set insecure file permissions (755 or 777) on files and directories when installing a package with a pkgmap file containing a "?" character in the "mode" field. Solution: Apply patches. -- SPARC Platform -- Solaris 10: Apply patch 119254-26 or later. http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-119254-26-1 -- x86 Platform -- Solaris 10: Apply patch 119255-26 or later. http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-119255-26-1 Provided and/or discovered by: Reported by the vendor. Changelog: 2006-09-05: Added CVE reference. Original Advisory: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

237 Related Secunia Security Advisories, displaying 10

1. Sun Solaris Kernel Covert Channel Security Bypass

2. Sun Solaris NFS RPC Zones Denial of Service

3. Sun Solaris NFS Kernel Module Denial of Service

4. Sun Solaris NFSv4 Client Kernel Module Denial of Service

5. Sun Solaris "sendfilev()" Denial of Service

6. Sun Solaris Trusted Extensions Labeled Networking Unauthorised Access

7. Sun Solaris "snoop" Multiple Vulnerabilities

8. Sun Solaris namefs Kernel Module Privilege Escalation

9. Sun Solaris Adobe Reader Multiple Vulnerabilities

10. Sun Solaris "pthread_mutex_reltimedlock_np" Local Denial of Service

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	HP OpenView Select Identity Connectors Information Disclosure

2.	Gentoo update for yelp

3.	Drupal Content Construction Kit Script Insertion Vulnerabilities

4.	Gentoo update for dnsmasq

5.	Gentoo update for mysql

6.	Gentoo update for realplayer

7.	rPath update for libtiff

8.	CS-Cart "cs_cookies" SQL Injection Vulnerability

9.	Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

10.	SUSE update for IBMJava5-JRE and java-1_5_0-ibm