Note: This is an archival copy of Security Sun Alert 248666 as previously published on http://sunsolve.sun.com.
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1019908.1.
Article ID : 1019908.1
Article Type : Sun Alerts (SURE)
Last reviewed : 2010-05-20
Audience : PUBLIC
Copyright Notice: Copyright © 2010, Oracle Corporation and/or its affiliates.

This Alert Covers CVE-2010-0891 for the Sun Management Center Product

Category
Security

Release Phase
Resolved

Bug Id
6699845

Product
Sun Management Center 3.6.1
Sun Management Center 4.0

Date of Resolved Release
12-Apr-2010

.

1. Impact

This Alert covers CVE-2010-0891 for the Sun Management Center product.

CVE-2010-0891 can be found at http://cve.mitre.org/cgi-bin/cvename.cgi?name=2010-0891

Please see http://www.oracle.com/technology/deploy/security/alerts.htm for more information about Critical Patch Updates and Security Alerts. This publication relates to the CPU for April 2010.

2. Contributing Factors

This issue can occur in the following releases:

SPARC Platform
  • Sun Management Center 3.6.1 (for Solaris 10) without patch 125833-05
  • Sun Management Center 4.0 (for Solaris 10) without patch 139613-01
x86 Platform
  • Sun Management Center 4.0 (for Solaris 10) without patch 143314-02
Notes:

1. SunMC is not bundled with Solaris. This issue only affects systems installed with Sun Management Center (SunMC) server software.

2. Sun MC 3.6.1 server is not supported on the Solaris x86 platform.

To determine if Sun MC server is installed on a Solaris system or what version is present, the following command can be run:
$ pkginfo -l SUNWessrv | grep VERSION
VERSION: 3.6.1,REV=2.7.2003.08.28
If the following error message is returned, the "SUNWessrv" package and Sun MC server are not installed on the system.
ERROR: information for "SUNWessrv" was not found.
To determine if the SCM module is installed on a Solaris system, the following command can be run:
$ pkginfo SUNWscmc
system  SUNWscmc Solaris Container Manager Console
If instead, the following error message is returned:
$ pkginfo SUNWscmc 
ERROR: information for "SUNWscmc" was not found
then the SCM module is not installed on the system.

3. Symptoms


4. Workaround


5. Resolution

This issue is addressed in the following releases:

SPARC Platform
  • SunMC 3.6.1 (for Solaris 10) with patch 125833-05 or later
  • SunMC 4.0 (for Solaris 10) with patch 139613-01 or later
x86 Platform
  • Sun Management Center 4.0 (for Solaris 10) with patch 143314-02 or later
Sun Management Center (Sun MC) can be downloaded from:


References

125833-05
139613-01
143314-02





Attachments
This solution has no attachment