Category
Security
Release Phase
Resolved
ProductSolaris 9 Operating System
Solaris 7 Operating System
Solaris 8 Operating System
Bug Id
4706351
Date of Resolved Release15-JUN-2005
Impact
A local unprivileged user may be able to overwrite any file on the system due to a security vulnerability with the lpadmin(1M) utility.
Contributing Factors
This issue can occur in the following releases:
Sparc Platform
- Solaris 7 without patch 107115-18
- Solaris 8 without patch 109320-14
- Solaris 9 without patch 113329-07
x86 Platform
- Solaris 7 without patch 107116-18
- Solaris 8 without patch 109321-14
- Solaris 9 without patch 114980-09
Note: Solaris 10 is not affected by this issue.
Symptoms
There are no predictable symptoms that would indicate the described issue has been exploited, as it depends on which file is overwritten.
Workaround
There is no workaround. Please see the "Resolution" section below.
Resolution
This issue is addressed in the following releases:
Sparc Platform
- Solaris 7 with patch 107115-18 or later
- Solaris 8 with patch 109320-14 or later
- Solaris 9 with patch 113329-07 or later
x86 Platform
- Solaris 7 with patch 107116-18 or later
- Solaris 8 with patch 109321-14 or later
- Solaris 9 with patch 114980-09 or later
References
107115-18
109320-14
113329-07
107116-18
109321-14
114980-09
AttachmentsThis solution has no attachment