----------------------------------------------------------------------

Want to work within IT-Security?

Secunia is expanding its team of highly skilled security experts.
We will help with relocation and obtaining a work permit.

Currently the following type of positions are available:
http://secunia.com/quality_assurance_analyst/
http://secunia.com/web_application_security_specialist/ 
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Sun Solaris libX11 Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA21815

VERIFY ADVISORY:
http://secunia.com/advisories/21815/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Sun Solaris 10
http://secunia.com/product/4813/
Sun Solaris 8
http://secunia.com/product/94/
Sun Solaris 9
http://secunia.com/product/95/

DESCRIPTION:
A vulnerability has been reported in Sun Solaris, which can be
exploited by malicious, local users to gain escalated privileges.

The vulnerability is due to a boundary error in libX11. This can be
exploited to cause a buffer overflow and allows arbitrary code
execution with the privileges of the application dynamically linked
to the library.

The vulnerability affects Sun Solaris 8, 9, and 10 for the SPARC and
x86 platform.

SOLUTION:
Apply patches:

-- SPARC Platform --

Solaris 8:
Apply patch 119067-03 or later.

Solaris 9:
Apply patch 112785-56 or later.

Solaris 10:
Apply patch 119059-16 or later.

-- x86 Platform --

Solaris 8:
Apply patch 119068-03 or later.

Solaris 9:
Apply patch 112786-45 or later.

Solaris 10:
Apply patch 119060-15 or later.

PROVIDED AND/OR DISCOVERED BY:
RISE Security

ORIGINAL ADVISORY:
Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102570-1

RISE Security:
http://www.risesecurity.org/advisory/RISE-2006001.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------