<a href="http://g.adspeed.net/ad.php?do=clk&zid=14678&wd=728&ht=90&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=14678&wd=728&ht=90&pair=as" alt="i" width="728" height="90"/></a>

Nmap Security Scanner

Docs
Security Lists

Full Disclosure

More
Security Tools

Packet crafters

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

edgeos

Bugtraq: Re: [Full-disclosure] Solaris 9/10 ld.so fun

Re: [Full-disclosure] Solaris 9/10 ld.so fun

From: Przemyslaw Frasunek <venglin_at_freebsd.lublin.pl>
Date: Tue, 28 Jun 2005 18:17:02 +0200

Przemyslaw Frasunek wrote:
> - SunOS 5.10 Generic i86pc i386 i86pc
> - SunOS 5.9 Generic_112233-12 sun4u

This vulnerability was introduced by one of the recent patches for Solaris 9,
possibly 112963. Ld.so patched with 112963-08 is not vulnerable -- it does
not allow LD_AUDIT for set[ug]id binaries, but upgrading to 112963-16
definitly makes ld.so exploitable.

Up-to-date Solaris 8 boxes are also vulnerable. Solaris 10 boxes are
vulnerable, both patched and unpatched.

-- 
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NICHDL: PMF9-RIPE *
* JID: venglin_at_jabber.atman.pl ** PGP ID: 2578FCAD ** HAM-RADIO: SQ8JIV *

Received on Jun 28 2005

This message: [ Message body ]
Next message: abducter_minds_at_yahoo.com: "XSS IN Community forum"
Previous message: Przemyslaw Frasunek: "Re: [Full-disclosure] Solaris 9/10 ld.so fun"
In reply to: Przemyslaw Frasunek: "Solaris 9/10 ld.so fun"
Next in thread: Piotr KUCHARSKI: "Re: [Full-disclosure] Solaris 9/10 ld.so fun"
Reply: Piotr KUCHARSKI: "Re: [Full-disclosure] Solaris 9/10 ld.so fun"
Reply: Przemyslaw Frasunek: "Re: [Full-disclosure] Solaris 9/10 ld.so fun"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]