file clobbering vulnerability in Solaris update manager & local root with SUNWbindr install.

Hi list, Two small problems I noticed with Oracle Solaris Update Manager and the latest patch cluster on Solaris 10 x86. += Local Root If the system administrator is updating the system using update manager or smpatch multi user mode a race condition exists with the postinstall script for SUNWbin...

Solaris Update for behavior 125555-07

Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125555-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Solaris Update for kernel 142901-07

Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 142901-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Symlink attack with Solaris Update manager and Sun Patch Cluster

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Solaris Update Manager / Sun Patch Cluster Symlink Attack

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Solaris Update for ipf 141505-07

Check for the Version of ipf OpenVAS Vulnerability Test Solaris Update for ipf 141505-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for kinit 141500-05

Check for the Version of kinit OpenVAS Vulnerability Test Solaris Update for kinit 141500-05 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Solaris Update for Sun GigaSwift Ethernet 1.0 driver 118777-15

Check for the Version of Sun GigaSwift Ethernet 1.0 driver OpenVAS Vulnerability Test Solaris Update for Sun GigaSwift Ethernet 1.0 driver 118777-15 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Trusted Extensions 143503-01

Check for the Version of Trusted Extensions OpenVAS Vulnerability Test Solaris Update for Trusted Extensions 143503-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Solaris Update for kinit 141500-05

Check for the Version of kinit OpenVAS Vulnerability Test Solaris Update for kinit 141500-05 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Solaris Update for ldap library 114242-53

Check for the Version of ldap library OpenVAS Vulnerability Test Solaris Update for ldap library 114242-53 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for Simplified Chinese locale 120412-10

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120412-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for KCMS 114636-05

Check for the Version of KCMS OpenVAS Vulnerability Test Solaris Update for KCMS 114636-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Solaris Update for Kernel 122301-44

Check for the Version of Kernel OpenVAS Vulnerability Test Solaris Update for Kernel 122301-44 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for libxml, libxslt and Freeware man pages 114014-24

Check for the Version of libxml, libxslt and Freeware man pages OpenVAS Vulnerability Test Solaris Update for libxml, libxslt and Freeware man pages 114014-24 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

Solaris Update for SMA 120273-27

Check for the Version of SMA OpenVAS Vulnerability Test Solaris Update for SMA 120273-27 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for Asian CCK locales 120414-24

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120414-24 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for sshd 140119-11

Check for the Version of sshd OpenVAS Vulnerability Test Solaris Update for sshd 140119-11 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Solaris Update for sshd 140119-09

Check for the Version of sshd OpenVAS Vulnerability Test Solaris Update for sshd 140119-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Solaris Update for ip 119435-28

Check for the Version of ip OpenVAS Vulnerability Test Solaris Update for ip 119435-28 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...