TITLE:
Sun Solaris Xsun and Xprt Privilege Escalation Vulnerability

SECUNIA ADVISORY ID:
SA16955

VERIFY ADVISORY:
http://secunia.com/advisories/16955/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Sun Solaris 9
http://secunia.com/product/95/
Sun Solaris 8
http://secunia.com/product/94/
Sun Solaris 7
http://secunia.com/product/93/
Sun Solaris 10
http://secunia.com/product/4813/

DESCRIPTION:
A vulnerability has been reported in Solaris, which can be exploited
by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an unspecified error in the Xsun
and Xprt commands. This can be exploited by  unprivileged users to
execute arbitrary code with the privileges of either command.

The vulnerability has been reported in Solaris 7, 8, 9, and 10.

SOLUTION:
Apply patches.

-- SPARC Platform --

Solaris 8:
Apply patch 108652-93 or later.

Solaris 9:
Apply patch 112785-50 or later.

Solaris 10:
Apply patch 119059-05 or later.

-- x86 Platform --

Solaris 8:
Apply patch 108653-82 or later.

Solaris 9:
Apply patch 112786-39 or later.

Solaris 10:
Apply patch 119060-05 or later.

A final resolution is reportedly pending completion for Solaris 7.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Eric Sheridan, Towson University.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101800-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------