vulnerability bulletin 8838

Solaris: file altering via Lightweight Availability Collection Tool

Synthesis of the vulnerability

A local attacker can use a symbolic link in order to force Lightweight Availability Collection Tool to corrupt a file.

Severity: 1/4. Creation date: 03/07/2009.

Description of the vulnerability

The Sun Lightweight Availability Collection Tool product collects information on the system availability (boot, panic and halt). A local attacker can use a symbolic link in order to force Lightweight Availability Collection Tool to corrupt a file. Technical details are unknown.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Solaris: file altering via Lightweight Availability Collection Tool. Keywords: Availability Collection Lightweight Solaris Sun Tool altering file. Identifiers: 261408, 6839596, BID-35568, VIGILANCE-VUL-8838.

Information sources

Publications and announces Source example: Security Vulnerability in Lightweight Availability Collection Tool May Allow Unprivileged User to Overwrite Files

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer vulnerability bulletins