[SA20445] Sun StorADE Privilege Escalation Vulnerability

---

Want to join the Secunia Security Team?

Secunia offers a position as a security specialist, where your daily
work involves reverse engineering of software and exploit code,
auditing of source code, and analysis of vulnerability reports.

http://secunia.com/secunia_security_specialist/

---

TITLE:
Sun StorADE Privilege Escalation Vulnerability

SECUNIA ADVISORY ID:
SA20445

VERIFY ADVISORY:
http://secunia.com/advisories/20445/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

SOFTWARE:
Storage Automated Diagnostic Environment 2.x
http://secunia.com/product/10321/

DESCRIPTION:
A vulnerability has been reported in Storage Automated Diagnostic
Environment (StorADE), which can be exploited by malicious, local
users to gain escalated privileges.

The vulnerability is caused due to insecure default file and
directory permissions (world-writable) on components installed by the
optional SUNWstadm package.

The vulnerability has been reported version 2.4 for the SPARC
platform. Prior versions are reportedly not affected.

SOLUTION:
Apply patch:

– SPARC Platform –

StorADE 2.4 (for Solaris 8, 9 and 10) patch 117654-60:
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117654-60-1

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102305-1

---

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.