Note: This is an archival copy of Security Sun Alert 201588 as previously published on http://sunsolve.sun.com.
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1001193.1.
Article ID : 1001193.1
Article Type : Sun Alerts (SURE)
Last reviewed : 2005-06-14
Audience : PUBLIC
Copyright Notice: Copyright © 2010, Oracle Corporation and/or its affiliates.

Security Vulnerability in the lpadmin(1M) Utility



Category
Security

Release Phase
Resolved

Product
Solaris 9 Operating System
Solaris 7 Operating System
Solaris 8 Operating System

Bug Id
4706351

Date of Resolved Release
15-JUN-2005

Impact

A local unprivileged user may be able to overwrite any file on the system due to a security vulnerability with the lpadmin(1M) utility.


Contributing Factors

This issue can occur in the following releases:

Sparc Platform

  • Solaris 7 without patch 107115-18
  • Solaris 8 without patch 109320-14
  • Solaris 9 without patch 113329-07

x86 Platform

  • Solaris 7 without patch 107116-18
  • Solaris 8 without patch 109321-14
  • Solaris 9 without patch 114980-09

Note: Solaris 10 is not affected by this issue.


Symptoms

There are no predictable symptoms that would indicate the described issue has been exploited, as it depends on which file is overwritten.


Workaround

There is no workaround. Please see the "Resolution" section below.


Resolution

This issue is addressed in the following releases:

Sparc Platform

  • Solaris 7 with patch 107115-18 or later
  • Solaris 8 with patch 109320-14 or later
  • Solaris 9 with patch 113329-07 or later

x86 Platform

  • Solaris 7 with patch 107116-18 or later
  • Solaris 8 with patch 109321-14 or later
  • Solaris 9 with patch 114980-09 or later


References

107115-18
109320-14
113329-07
107116-18
109321-14
114980-09




Attachments
This solution has no attachment