Description
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14988 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57453-1 ↗
- http://www.auscert.org.au/render.html?it=3800 ↗
- http://secunia.com/advisories/10755/ ↗
- http://www.securitytracker.com/id?1008893 ↗
- http://www.osvdb.org/3764 ↗
- http://www.securityfocus.com/bid/9534 ↗