Document Audience: PUBLIC
Document ID: 101924
Title: Security Vulnerability in the Sun Ray Utility utxconfig(1)
Copyright Notice: Copyright © 2006 Sun Microsystems, Inc. All Rights
Reserved
Update Date: Thu Aug 10 00:00:00 MDT 2006
Status: Issued
Description
Sun(sm) Alert Notification
* Sun Alert ID: 101924
* Synopsis: Security Vulnerability in the Sun Ray Utility utxconfig(1)
* Category: Security
*
Product: Sun Ray Server Software 3.0
* BugIDs: 6319180
* Avoidance: Patch
* State: Resolved
* Date Released: 07-Aug-2006
* Date Closed: 07-Aug-2006
* Date Modified: 10-Aug-2006
1. Impact
A security vulnerability in the Sun Ray Server 3.x Software (SRSS)
utxconfig(1) utility may allow a local unprivileged user the ability to
create or overwrite arbitrary files on the system.
Note: utxconfig(1) is the Sun Ray DTU X server configuration utility.
2. Contributing Factors
This issue can occur in the following releases:
SPARC Platform
* Sun Ray Server Software 3.0 (for Solaris 8 and 9) without patch
118979-02
* Sun Ray Server Software 3.1 (for Solaris 8, 9 and 10) without
patch 120879-01
x86 Platform
* Sun Ray Server Software 3.1 (for Solaris 10) without patch 120880-01
Linux Platform
* Sun Ray Server Software 3.0 (for JDS R2, RHELAS 3.0, SLES 8.0)
without patch 119836-02
* Sun Ray Server Software 3.1 (for JDS R2, RHELAS 3.0, SLES 8.0)
without patch 120881-01
Notes:
1. Sun Ray Server Software 1.x and 2.x are not affected by this issue.
2. Sun Ray Server Software 3.0 is not supported on the Solaris x86
platform. (3.1 only)
3. Sun Ray Server Software 3.1 is not supported for Solaris 8 and 9
on the x86 platform. (Solaris 10 only)
To determine the version of Sun Ray Server Software on a system, the
following command can be run:
# /usr/bin/pkginfo -l SUNWuto | grep -i version
VERSION: 3.1_32,REV=2005.08.24.08.55
To determine if the utxconfig(1) utility has been installed as part of
the Sun Ray server software, the following command can be run:
$ pkginfo SUNWuta
3. Symptoms
There are no symptoms that would indicate the described issue has occurred.
Solution Summary
4. Relief/Workaround
To work around the described issue, temporarily remove the setuid(2) bit
from the utxconfig(1) command until the patch can be applied. To apply
this change, the following command can be run:
# chmod u-s /opt/SUNWut/bin/utxconfig
Note: Removing the setuid(2) bit from the command may decrease its
functionality for non-privileged users.
5. Resolution
This issue is addressed in the following releases:
SPARC Platform
* Sun Ray Server Software 3.0 (for Solaris 8 and 9) with patch
118979-02 or later
* Sun Ray Server Software 3.1 (for Solaris 8, 9 and 10) with patch
120879-01 or later
x86 Platform
* Sun Ray Server Software 3.1 (for Solaris 10) with patch 120880-01
or later
Linux Platform
* Sun Ray Server Software 3.0 (for JDS R2, RHELAS 3.0, SLES 8.0)
with patch 119836-02 or later
* Sun Ray Server Software 3.1 (for JDS R2, RHELAS 3.0, SLES 8.0)
with patch 120881-01 or later
Change History
10-Aug-2006:
* Updated Contributing Factors and Resolution sections
This Sun Alert notification is being provided to you on an "AS IS"
basis. This Sun Alert notification may contain information provided by
third parties. The issues described in this Sun Alert notification may
or may not impact your system(s). Sun makes no representations,
warranties, or guarantees as to the information contained herein. ANY
AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU
ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT
OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This Sun
Alert notification contains Sun proprietary and confidential
information. It is being provided to you pursuant to the provisions of
your agreement to purchase services from Sun, or, if you do not have
such an agreement, the Sun.com Terms of Use. This Sun Alert notification
may only be used for the purposes contemplated by these agreements.
Copyright 2000-2006 Sun Microsystems, Inc., 4150 Network Circle, Santa
Clara, CA 95054 U.S.A. All rights reserved.
the original document can be found on Sun's site at:
http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-101924-1
greetings,
Stoyan Angelov
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
