vulnerability bulletin 8838

Solaris: file altering via Lightweight Availability Collection Tool

Synthesis of the vulnerability

A local attacker can use a symbolic link in order to force Lightweight Availability Collection Tool to corrupt a file.

Severity: 1/4. Creation date: 03/07/2009.

Impacted products

• Oracle Solaris
• Oracle Trusted Solaris
• Sun Solaris

Description of the vulnerability

The Sun Lightweight Availability Collection Tool product collects information on the system availability (boot, panic and halt). A local attacker can use a symbolic link in order to force Lightweight Availability Collection Tool to corrupt a file. Technical details are unknown.

Share this bulletin

Complete Vigil@nce bulletin

Solaris: file altering via Lightweight Availability Collection Tool

Characteristics

Title: Solaris: file altering via Lightweight Availability Collection Tool. Keywords: Availability Collection Lightweight Solaris Sun Tool altering file. Identifiers: 261408, 6839596, BID-35568, VIGILANCE-VUL-8838.

Information sources

Publications and announces Source example: Security Vulnerability in Lightweight Availability Collection Tool May Allow Unprivileged User to Overwrite Files

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

Vigil@nce provides software vulnerabilities patches. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. The technology watch team tracks security threats targeting the computer system. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications.