exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New


Posted Oct 22, 2008
Authored by Derek Callaway | Site security-objectives.com

Security Objectives Advisory - Veritas Storage Foundation version 5.0 suffers from an arbitrary file read vulnerability in the qioadmin binary.

tags | advisory, arbitrary
advisories | CVE-2008-4638
SHA-256 | 922ebd3425d504bed309bc3e70b7c7368ba68eae9ce936182f24c1586db990dc


Change Mirror Download
= Security Objectives Advisory (SECOBJADV-2008-05) =

Veritas Storage Foundation Arbitrary File Read Vulnerability


AFFECTED: Veritas Storage Foundation 5.0

PLATFORM: Solaris, Linux, AIX, HP-UX

CLASSIFICATION: Improper Ownership Management (CWE-282)

RESEARCHER: Derek Callaway

IMPACT: Arbitrary File Read



REFERENCES: CVE-2008-4638, SYM08-018, BID 31679


Veritas Storage Foundation 5.0 from Symantec provides a complete
solution for heterogeneous online storage management. Based on the
industry-leading Veritas Volume Manager and Veritas File System, it
provides a standard set of integrated tools to centrally manage
explosive data growth, maximize storage hardware investments, provide
data protection and adapt to changing business requirements.


VxFS is an extent based, journaling filesystem. It implements a
"Quick I/O for Databases" feature; qioadmin is the setuid root
administration utility for this functionality. When given an arbitrary
filename, it will write the file's contents to the standard error stream.


qioadmin will write arbitrary files (including /etc/shadow) to stderr.
Each line will be prepended with a custom error message followed by file
contents. Clearly, this can lead to privilege escalation by cracking the
password ciphertext for the "superuser" or root account.


Remove the set-uid bit from the qioadmin binary.

chmod u-s /opt/VRTS/bin/qioadmin


Symantec included a fix for this problem in the recent maintenance
release Veritas Software File System 5.0 MP3.


11-Aug-2008 Discovery of Vulnerability
18-Aug-2008 Developed Proof-of-Concept
21-Aug-2008 Reported to Vendor
20-Oct-2008 Maintenance Release
22-Oct-2008 Published Advisory


Security Objectives is a security centric consultancy and software development
corporation which operates in the area of application assurance software.
Security Objectives employs methods that are centered on software
comprehension, therefore a more in-depth contextual understanding of the
application is developed.



Permission is granted for electronic distribution of this advisory.
It may not be edited without the written consent of Security Objectives.

The information contained in this advisory is believed to be accurate based on
currently available information and is provided "as is" without warranty of
any kind, either expressed or implied, including, but not limited to, the
implied warranties of merchantability and fitness for a particular purpose.
The entire risk as to the quality and performance of the information is with
Login or Register to add favorites

File Archive:

December 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    11 Files
  • 2
    Dec 2nd
    0 Files
  • 3
    Dec 3rd
    0 Files
  • 4
    Dec 4th
    0 Files
  • 5
    Dec 5th
    0 Files
  • 6
    Dec 6th
    0 Files
  • 7
    Dec 7th
    0 Files
  • 8
    Dec 8th
    0 Files
  • 9
    Dec 9th
    0 Files
  • 10
    Dec 10th
    0 Files
  • 11
    Dec 11th
    0 Files
  • 12
    Dec 12th
    0 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2022 Packet Storm. All rights reserved.

Security Services
Hosting By