Note: This is an archival copy of Security Sun Alert 200256 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1000201.1.
Solaris 9 Operating System
Solaris 7 Operating System
Solaris 8 Operating System
Date of Resolved Release
A security vulnerability in the kcms_configure(1) command may allow local unprivileged users the ability to modify any file on the system. This can result in a Denial of Service (DoS) or possibly elevated privileges.
Note: kcms_configure is part of the Kodak Color Management System (KCMS) which configures an X11 window system for use with the KCMS library.
This issue is described in CAN-2004-0481 (see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0481)
Sun acknowledges with thanks, iDEFENSE (http://www.idefense.com), for bringing this issue to our attention.
This issue can occur in the following releases:
Note: Solaris 10 is not affected by this issue.
There are no reliable symptoms that would indicate the described issue has been exploited.
If KCMS is not being used, the setuid(2) permissions on the kcms_configure(1) binary could be removed by running the following command as the root (uid 0) user:
# chmod u-s /usr/openwin/bin/kcms_configure
The KCMS packages below could also be removed by using the pkgrm(1M) command as root user:
Core KCMS packages:
application SUNWkcslx KCMS Runtime Library (64-bit) application SUNWkcspf KCMS Optional Profiles application SUNWkcspg KCMS Programmers Environment application SUNWkcspx KCMS Programmers Environment (64-bit) system SUNWkcsrl KCMS Runtime Library Support system SUNWkcsrr KCMS Runtime Profiles application SUNWkcsrt KCMS Runtime Environment application SUNWkcsrx KCMS Runtime Environment (64-bit)
Translated KCMS packages:
ALE SUNWckcsr Simplified Chinese (EUC) KCMS Runtime Environment application SUNWdkcsr German KCMS Runtime Environment application SUNWekcsr Spanish KCMS Runtime Environment application SUNWfkcsr French KCMS Runtime Environment ALE SUNWhkcsr Traditional Chinese (EUC) KCMS Runtime Environment application SUNWikcsr Italian KCMS Runtime Environment application SUNWjkcsr Japanese KCMS Runtime Environment ALE SUNWkkcsr Korean (EUC) KCMS Runtime Environment application SUNWskcsr Swedish KCMS Runtime Environment
# pkgrm SUNWkcslx SUNWkcspf SUNWkcspg SUNWkcspx SUNWkcsrl SUNWkcsrr \ SUNWkcsrt SUNWkcsrx SUNWckcsr SUNWdkcsr SUNWekcsr SUNWfkcsr SUNWhkcsr \ SUNWikcsr SUNWjkcsr SUNWkkcsr SUNWskcsr
This issue is addressed in the following releases:
This solution has no attachment