|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
Keywords |
Remote Procedure Call
|
|
Description |
Sun Microsystems Solaris contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to a flaw in the sadmind daemon's handling of AUTH_SYS requests. If an attacker sends a specially crafted Remote Procedure Call (RPC) packet, they may be able to forge the AUTH_SYS credentials. This would allow the execution of arbitrary commands with root privileges.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Sun Microsystems has released a patch to address this issue. It is also possible to correct the flaw by implementing the following workarounds: Disable the sadmind daemon.
SPARC Platform - Patch 116456-01
x86 Platform - Patch 116457-02
|
|
Products |
|
Solaris
 |
7.x |
8.x |
9.x |
|
|
|
|
|
|
Credit |
- Mark Zielinski - markzielinski
 mailblocks.com - via iDefense VCP
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
