Sun Solaris内核隐蔽通道建立安全绕过漏洞

BUGTRAQ ID:30880 CNCAN ID：CNCAN-2008082908 Sun Solaris是一款开放源代码的操作系统。 Solaris内核存在安全绕过问题，允许两个处理程序建立一个隐蔽通信通道。 此漏洞允许两个非特权本地用户处理程序建立一个隐蔽通信通道来绕过系统限制，如Solaris可信扩展中的多层安全策略或使用zones(5)或chroot(2)实现的冲突策略。 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun Solaris 10 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris 可参考如下补丁： Sun Solaris 10.0 Sun 137111-05 SPARC <a href=http://sunsolve.sun.com/search/document.do?assetkey=1-21-137111-05-1 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=1-21-137111-05-1</a> Sun 137112-05 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -137112-05-1 Sun Solaris 9 Sun 122300-30 SPARC <a href=http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-30-1 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-30-1</a> Sun 122301-30 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -122301-30-1 Sun Solaris 10_sparc Sun 137111-05 SPARC <a href=http://sunsolve.sun.com/search/document.do?assetkey=1-21-137111-05-1 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=1-21-137111-05-1</a> Sun Solaris 9_x86 Sun 122301-30 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -122301-30-1 Sun Solaris 10.0_x86 Sun 137112-05 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -137112-05-1 Sun Solaris 10_x86 Sun 137112-05 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -137112-05-1 Sun Solaris 8_x86 Sun 117351-56 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -117351-56-1 Sun Solaris 8 Sun 117350-56 SPARC <a href=http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-56-1 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-56-1</a> Sun Solaris 10 Sun 137111-05 SPARC <a href=http://sunsolve.sun.com/search/document.do?assetkey=1-21-137111-05-1 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=1-21-137111-05-1</a> Sun 137112-05 x86 <a href=http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 target=_blank>http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21</a> -137112-05-1