Document Audience: PUBLIC
Document ID: 253889
Title: Two Security Vulnerabilities in Sun Ray Server Software 4.0 on
Systems with Trusted Extensions Enabled May Allow either a Denial of
Service (DoS) of the Audio Service or Unauthorized Access to Other
Users' Sessions
Copyright Notice: Copyright © 2009 Sun Microsystems, Inc. All Rights
Reserved
Update Date: Wed Jul 15 00:00:00 MDT 2009
Solution Type Sun Alert
Solution 253889: Two Security Vulnerabilities in Sun Ray Server
Software 4.0 on Systems with Trusted Extensions Enabled May Allow either
a Denial of Service (DoS) of the Audio Service or Unauthorized Access to
Other Users' Sessions
Bug ID: 6672502
Product: Sun Ray Server Software 4.0
Date of Resolved Release: 15-Jul-2009
SA Document Body
Two Security Vulnerabilities in Sun Ray Server Software 4.0 on Systems
with Trusted Extensions Enabled May Allow either a Denial of Service
(DoS) of the Audio Service or Unauthorized Access to Other Users' Sessions
1. Impact
A security vulnerability in the Sun Ray Server Software (SRSS) utaudiod
daemon audio service may allow a local unprivileged user to cause a
denial of audio service or possibly to execute arbitrary code with the
privileges of the utaudiod service. A second vulnerability, an
information leak in the utaudiod daemon, may allow a local unprivileged
user on a system with Trusted Extensions enabled to gain unauthorized
access to the Sun Ray sessions of other users.
2. Contributing Factors
These issues can occur in the following releases:
SPARC Platform:
* Sun Ray Server Software 4.0 (for Solaris 10) without patch 127553-06
x86 Platform:
* Sun Ray Server Software 4.0 (for Solaris 10) without patch 127554-06
Notes:
1. Sun Ray Server Software 2.0, 3.0, 3.1, 3.1.1 and 4.1 are not affected
by these issues.
To determine the version of Sun Ray Server Software on a system, the
following command can be run:
$/opt/SUNWut/lib/utprodinfo -p SUNWuto VERSION
4.0_48
2. These issues can only occur on systems with Trusted Extensions enabled.
To determine if a system is configured with Solaris Trusted Extensions,
the following command can be run:
$ svcs /system/labeld
STATE STIME FMRI
online 7:08:09 svc:/system/labeld:default
If the system is configured with Solaris Trusted Extensions, the
"labeld" service will have an instance in the online state.
3. Symptoms
There are no predictable symptoms that would indicate the described
vulnerabilities have been exploited.
4. Workaround
There is no workaround for these issues. Please see the Resolution
section below.
5. Resolution
These issues are addressed in the following releases:
SPARC Platform:
* Sun Ray Server Software 4.0 (for Solaris 10) with patch 127553-06
or later
x86 Platform:
* Sun Ray Server Software 4.0 (for Solaris 10) with patch 127554-06
or later
For more information on Security Sun Alerts, see Technical Instruction
ID 213557.
This Sun Alert notification is being provided to you on an "AS IS"
basis. This Sun Alert notification may contain information provided by
third parties. The issues described in this Sun Alert notification may
or may not impact your system(s). Sun makes no representations,
warranties, or guarantees as to the information contained herein. ANY
AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU
ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT
OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This Sun
Alert notification contains Sun proprietary and confidential
information. It is being provided to you pursuant to the provisions of
your agreement to purchase services from Sun, or, if you do not have
such an agreement, the Sun.com Terms of Use. This Sun Alert notification
may only be used for the purposes contemplated by these agreements.
Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa
Clara, CA 95054 U.S.A. All rights reserved.
document link at sun.com:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
