Vulnerability Note VU#702526

Sun Solaris allows unprivileged local user to load arbitrary kernel modules

Overview

Sun Solaris allows an unprivileged local user to load arbitrary kernel modules.

I. Description

Sun Solaris supports loadable kernel modules (LKMs). LKMs are pieces of code that can be dynamically loaded and unloaded into the kernel. Sun Solaris contains a vulnerability that could allow an unprivileged local user to load arbitrary kernel modules.

II. Impact

A local user could gain root privileges by loading arbitrary kernel modules.

III. Solution

Apply Patch

Apply a patch. For information about the patches, please see Sun Alert ID: 57479.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Sun Microsystems Inc.	Vulnerable	26-Jan-2004

References

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57479
http://www.securityfocus.com/bid/9477
http://www.tldp.org/HOWTO/Module-HOWTO/

Credit

Thanks to Sun Microsystems for the information contained in their security advisory.

This document was written by Damon Morda.

Other Information

Date Public:	2004-01-23
Date First Published:	2004-01-26
Date Last Updated:	2004-01-26
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Metric:	13.50
Document Revision:	10

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader