Sun Solaris 'auditconfig(1M)'命令本地特权提升漏洞

Bugraq ID: 35501 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的auditconfig存在错误，如果Solaris审核系统启用，并且用户有指派的RBAC可执行配置文件，可允许以高特权执行任意命令。 目前没有详细漏洞细节提供。 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8 Sun Solaris 10_x86 Sun Solaris 10 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 可参考如下补丁： Sun Solaris 9 Sun Solaris 9 patch 122300-39 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122300-39-1 Sun Solaris 9_x86 Sun Solaris 9 patch 122301-39 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122301-39-1 Sun Solaris 10_x86 Sun Solaris 10 patch 140922-01 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -140922-01-1 Sun Solaris 8_x86 Sun Solaris 8 patch 109008-28 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109008-28-1 Sun Solaris 8 Sun Solaris 8 patch 109007-28 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109007-28-1 Sun Solaris 10 Sun Solaris 10 patch 140921-01 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -140921-01-1