Sun Cluster SunPlex Manager May Let Certain Local Users Access Restricted Files
|
|
SecurityTracker Alert ID: 1015849
|
|
SecurityTracker URL: http://securitytracker.com/id?1015849
|
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Mar 30 2006
|
Impact: Disclosure of system information, Disclosure of user information
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Sun Alert
|
Version(s): Sun Cluster 3.1 4/04
|
Description: A vulnerability was reported in the Sun Cluster SunPlex Manager. A local user may be able to view restricted files.
The SunPlex Manager GUI contains an unspecified vulnerability. A local user with 'solaris.cluster.gui' authorization may be able to view restricted files.
|
Impact: A local user may be able to view restricted files.
|
Solution: Sun has issued the following fix.
SPARC Platform
* Sun Cluster 3.1 9/04 (for Solaris 8 and 9) or later
x86 Platform
* Sun Cluster 3.1 9/04 (for Solaris 9) or later
The Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1 (Links to External Site)
|
Cause: Access control error
|
Underlying OS: UNIX (Solaris - SunOS)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 30 Mar 2006 01:12:14 -0500
Subject: Security Vulnerability in the SunPlex Manager Software Delivered With Sun Cluster 3.1 4/04
|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1
|
|