|
Sun Solaris dtsession privilege escalation
|
|
Secunia Advisory:
|
SA8468
|
|
|
Release Date:
|
2003-04-01
|
|
Popularity:
|
7,518 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Privilege escalation
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Sun Solaris 2.6
Sun Solaris 7
Sun Solaris 8
Sun Solaris 9
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0092
|
|
Description:
Sun Solaris has been found vulnerable to a privilege escalation vulnerability in "dtsession".
dtsession is installed setuid "root" and does not properly verify the "HOME" environment variable. This allows a malicious user to cause a heap overflow which can be exploited to execute arbitrary code with root privileges.
Solution:
It is necessary to remove the setuid bit until Sun issues a patch. This may prevent users from unlocking the screen.
Reportedly Sun should have published an advisory today:
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/52388
The patches:
Solaris 2.6 106027-12
Solaris 2.6_x86 106028-12
Solaris 7 107702-12
Solaris 7_x86 107703-12
Solaris 8 109354-19
Solaris 8_x86 109355-18
Solaris 9 114497-01
Solaris 9_x86 114498-01
Provided and/or discovered by:
NSFOCUS Security Team
Original Advisory:
http://www.nsfocus.com/english/homepage/sa2003-03.htm
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
