[eddie5659]

Hiya

Sun Solaris versions 2.6, 7, 8, and 9 are vulnerable to multiple buffer overflows in the /usr/bin/uucp application. A local unprivileged attacker could exploit this vulnerability to overflow a buffer and gain root privileges on the system.

Platforms Affected:

Sun Microsystems Solaris 2.6
Sun Microsystems Solaris 2.6 x86
Sun Microsystems Solaris 7 SPARC
Sun Microsystems Solaris 7 x86
Sun Microsystems Solaris 8 SPARC
Sun Microsystems Solaris 8 x86
Sun Microsystems Solaris 9 SPARC
Sun Microsystems Solaris 9 x86

Remedy:

Apply the appropriate patch for your system, as listed below. Refer to Sun Alert Notification 57508 for more information

SPARC Platform:

Solaris 2.6 with patch 106468-06 or later
Solaris 7 with patch 106952-04 or later
Solaris 8 with patch 111570-03 or later
Solaris 9 with patch 113322-02 or later

x86 Platform:

Solaris 2.6 with patch 106469-06 or later
Solaris 7 with patch 106953-04 or later
Solaris 8 with patch 111571-03 or later
Solaris 9 with patch 115880-01 or later

http://xforce.iss.net/xforce/xfdb/15425

Regards

eddie