Security Vulnerability in the lpadmin(1M) Utility


Category :Security
Release Phase :Resolved
Product :Solaris 9 Operating System
Solaris 7 Operating System
Solaris 8 Operating System  
Bug Id :4706351  
Date of Resolved Release :15-JUN-2005 


Impact

A local unprivileged user may be able to overwrite any file on the system due to a security vulnerability with the lpadmin(1M) utility.


Contributing Factors

This issue can occur in the following releases:

Sparc Platform

  • Solaris 7 without patch 107115-18
  • Solaris 8 without patch 109320-14
  • Solaris 9 without patch 113329-07

x86 Platform

Note: Solaris 10 is not affected by this issue.


Symptoms

There are no predictable symptoms that would indicate the described issue has been exploited, as it depends on which file is overwritten.


Workaround

There is no workaround. Please see the "Resolution" section below.


Resolution

This issue is addressed in the following releases:

Sparc Platform

  • Solaris 7 with patch 107115-18 or later
  • Solaris 8 with patch 109320-14 or later
  • Solaris 9 with patch 113329-07 or later

x86 Platform






Attachments
This solution has no attachment
 
Sun support customers:
more support information is available after you sign in.
 
»   Login
»   Register
»   Lost UserName/Password
 
Login Required

You must login and have a valid contract to access Sun's Premium content which includes:

  • Sun Alerts
  • Bugs
  • Patches
  • Solutions
  • White Papers
  • Documentation
  • Support Knowledge

Login Required

You must login and have a valid contract to access Sun's contracted features

Access Legend:

(Login to access)   Sun Contracted Content
(Login to access)   Sun Contracted Feature

Please make use of SunSolve Feedback application by selecting the floating [+] to provide feedback about this specific document.

Search
Article Details
Article ID : 201588
Article Type : Sun Alert
Last reviewed : 2005-06-15
Audience : PUBLIC
Keywords :
Provide feedback  (help)
Page Tools
»  Print This Page
»  Email This Article
»  Bookmark This Article
Security Support
»   Security Center
»   Report Security Vulnerabilities
»   Security PGP Key
»   Sun Alert Notifications - RSS Feeds
»   Sun Alert Notifications - eNewsletter
»   Solaris Fingerprint Database
 
SunSolve Navigation
»   Forums for contracted customers
»   Licenses
»   Log a Service Request
»   Patches and Updates
»   Product Download Center
»   SunSystem Handbook
»   SunSolve Japan
SunSolve Feedback, Help and Updates
»   Blog
»   Community
»   Feedback
»   Help
»   Learn about SunSolve
»   Twitter
About Oracle | Oracle and Sun | Oracle RSS Feeds | Subscribe | Careers | Contact Us | Site Maps | Legal Notices | Terms of Use | Your Privacy Rights | Copyright © 2010, Oracle Corporation and/or its affiliates | SunSolve Version 7.4.2 #1