Sun Solaris底带宽X代理信息泄露漏洞

BUGTRAQ ID: 25070
CNCAN ID:CNCAN-2007080108
Solaris是一款Sun公司开发的UNIX操作系统。
Solaris底带宽代理(lbxproxy(1))存在安全问题，本地攻击者可以利用漏洞获得敏感信息。
本地非特权用户可以读取ROOT属性的任意文件数据信息，导致敏感信息泄露。

Sun Solaris 10.0 _x86
Sun Solaris 10.0
Sun Solaris 9_x86
Sun Solaris 9
Sun Solaris 8_x86
Sun Solaris 8
升级程序：
Sun Solaris 9_x86
* Sun 112786-51
<a href=“http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21” target=“_blank”>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -112786-51-1
Sun Solaris 8_x86
* Sun 119068-08
<a href=“http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21” target=“_blank”>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -119068-08-1
Sun Solaris 8
* Sun 119067-08
<a href=“http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21” target=“_blank”>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -119067-08-1
Sun Solaris 9
* Sun 112785-62
<a href=“http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21” target=“_blank”>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -112785-62-1
Sun Solaris 10.0
* Sun 119059-28
<a href=“http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21” target=“_blank”>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -119059-28-1
Sun Solaris 10.0 _x86

• Sun 119060-27
  <a href=“http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21” target=“_blank”>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -119060-27-1