Secunia Logo
Netsikker nu! 2008
 
Sun Solaris bzip2 Multiple Vulnerabilities
Secunia Advisory: SA27274
Release Date: 2007-10-17
Last Update: 2008-06-30
Popularity: 4,620 views

Critical:
Less critical
Impact: Privilege escalation
DoS
Where: From remote
Solution Status: Vendor Patch

OS:Sun Solaris 10
Sun Solaris 8
Sun Solaris 9

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-0953
CVE-2005-1260


Description:
Sun has acknowledged a vulnerability in Sun Solaris, which can be exploited by malicious people to cause a DoS (Denial of Service).

For more information:
SA15447

Additionally, a race condition when setting file permissions has also been acknowledged.

The vulnerabilities are reported in Sun Solaris 8, 9 and 10 for both the x86 and SPARC platforms.

Solution:
Apply patches.

-- SPARC Platform --

Solaris 8:
Apply patch 138441-01 or later.

Solaris 9:
Apply patch 114586-02 or later.

Solaris 10:
Apply patch 126868-01 or later.

-- x86 Platform --

Solaris 8:
Apply patch 138442-01 or later.

Solaris 9:
Apply patch 114587-02 or later.

Solaris 10:
Apply patch 126869-02 or later.

Changelog:
2008-06-30: Updated "Solution" section with patch information for Solaris 8. Updated vendor link in "Original Advisory" section.

Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1

Other References:
SA15447:
http://secunia.com/advisories/15447/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Oracle Products Multiple Vulnerabilities // 44 views
2. BEA WebLogic Server Multiple Vulnerabilities // 42 views
3. Sun Solaris "sadmind" Buffer Overflow Vulnerability // 40 views
4. BEA WebLogic Workshop NetUI Pageflow Information Disclosure Vulnerability // 33 views
5. Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities // 32 views
6. phpJobScheduler "installed_config_file" File Inclusion Vulnerabilities // 30 views
7. VLC Media Player XSPF Processing Memory Corruption Vulnerability // 30 views
8. MyPHPDating "id" SQL Injection Vulnerability // 30 views
9. Microsoft Windows IIS IPP Service Integer Overflow Vulnerability // 29 views
10. WordPress WP Comment Remix Plugin Multiple Vulnerabilities // 29 views