Vulnerability 21179 - CERT Civis.Net

Vulnerability Name:

CCN-21179

Published:

2005-06-28

Updated:

2005-06-28

Summary:

Sun Solaris could allow a local attacker to gain elevated privileges caused by improper validation of user-supplied input in the id.so loader in the LD_AUDIT environment variable when executing binaries. If a local attacker creates arbitrary code and then sets the environment variable to point towards the code, the attacker could cause arbitrary code to be executed on the system with elevated privileges, once a set user id or set group id binary is initiated.

CVSS v3 Severity:

5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Consequences:

Gain Privileges

References:

Source: CCN
Type: Full-Disclosure Mailing List, Mon Jun 27 2005 - 18:11:58 CDT
Solaris 9/10 ld.so fun

Source: XF
Type: UNKNOWN
solaris-idso-gain-privileges(21179)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/o:sun:solaris:7.0::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:7.0::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:8::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*

Denotes that component is vulnerable

BACK