Keep Track of the Latest Vulnerabilities with SecurityTracker!

Home    |    View Topics    |    Search    |    Contact Us    |

SecurityTracker Archives

Sign Up Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary Instant Alerts Buy our Premium Vulnerability Notification Service to receive customized, instant alerts Affiliates Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free! Partners Become a Partner and License Our Database or Notification Service Report a Bug Report a vulnerability that you have found to SecurityTracker bugs @ securitytracker.com

Category:   OS (UNIX)  >   Solaris Vendors:   Sun Solaris Doors Subsystem Flaws Lets Local Users Gain Elevated Privileges and Deny Service SecurityTracker Alert ID:  1021840 SecurityTracker URL:  http://securitytracker.com/id/1021840 CVE Reference:   CVE-2009-0874, CVE-2009-0875   (Links to External Site) Updated:  Apr 2 2009 Original Entry Date:  Mar 12 2009 Impact:   Denial of service via local system, Execution of arbitrary code via local system, Root access via local system Fix Available:  Yes  Vendor Confirmed:  Yes   Version(s): 8, 9, 10, OpenSolaris Description:   Multiple vulnerabilities were reported in Solaris in the Doors subsystem. A local user can obtain elevated privileges on the target system. A local user can cause denial of service conditions. A local user can cause arbitrary door server processes on the target system to hang. A local user in a non-global zone can can access files without having proper permissions and may be able to execute arbitrary code on the target system with kernel-level privileges. Impact:   A local user can obtain kernel level privileges on the target system. A local user can cause arbitrary door server processes on the target system to hang. Solution:   The vendor has issued the following fixes. These issues are addressed in the following releases: SPARC Platform * Solaris 8 with patch 117350-61 or later * Solaris 9 with patch 122300-37 or later * Solaris 10 with patch 137137-05 or later * OpenSolaris based upon builds snv_94 or later x86 Platform * Solaris 8 with patch 117351-61 or later * Solaris 9 with patch 122301-37 or later * Solaris 10 with patch 137138-05 or later * OpenSolaris based upon builds snv_94 or later The vendor's advisory is available at: http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 Vendor URL:  sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 (Links to External Site) Cause:   Not specified Underlying OS:   Message History:   None.  Source Message Contents Date:  Wed, 11 Mar 2009 19:14:23 -0500 Subject:  http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 Go to the Top of This SecurityTracker Archive Page

Home   |    View Topics   |    Search   |    Contact Us
Copyright 2013, SecurityGlobal.net LLC