Hmmmmm.... Il n'y a aucune mention sur l'origine de la vulnerabilite.
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102066-1
Description Top
Sun(sm) Alert Notification
* Sun Alert ID: 102066
* Synopsis: Security Vulnerability May Allow An Unprivileged Local User to
Gain Root Access or Panic the OS
* Category: Security
*
Product: Solaris 9 Operating System, Solaris 10 Operating System
* BugIDs: 6293270
* Avoidance: Patch
* State: Resolved
* Date Released: 11-Jan-2006
* Date Closed: 11-Jan-2006
* Date Modified:
1. Impact
On Solaris 10 x86 systems, or on Solaris 9 x86 systems with patch 112234-11 or
112234-12 or patch 117172-16 (or later) installed, a local unprivileged user may
have the ability to gain root access or panic the Solaris operating system.
2. Contributing Factors
The issue can occur in the following releases:
x86 Platform
* Solaris 9 with patch 112234-11, 112234-12 or 117172-16 or later and
without patch 118559-19
* Solaris 10 without patch 118844-24
Note: Solaris 8 is not affected by this issue. Solaris on the SPARC platform is
not affected by this issue.
3. Symptoms
There are no predictable symptoms that would indicate this issue has been
exploited to gain root access. The unprivileged user may cause Solaris to panic
(with a corresponding stack trace that includes functions from the mm(5)
driver).
Solution Summary Top
4. Relief/Workaround
There is no workaround to this issue. Please see the Resolution section below.
5. Resolution
This issue is addressed in the following releases:
x86 Platform
* Solaris 9 with patch 118559-19 or later
* Solaris 10 with patch 118844-24 or later
--
---------------------------------------------------------------
Jose Marcio MARTINS DA CRUZ Tel. :(33) 01.40.51.93.41
Ecole des Mines de Paris http://j-chkmail.ensmp.fr
60, bd Saint Michel http://www.ensmp.fr/~martins
75272 - PARIS CEDEX 06 mailto:[EMAIL PROTECTED]
_______________________________________________
Solaris_fr liste de diffusion en français pour Solaris, sur toutes architectures
[email protected]
http://x86.sun.com/mailman/listinfo/solaris_fr
