Sun(sm) Alert Notification

    * Sun Alert ID: 55680
    * Synopsis: Security Vulnerability in the Solaris Runtime Linker ld.so.1(1)
    * Category: Security
    * Product: Solaris
    * BugIDs: 4872634
    * Avoidance: Patch
    * State: Resolved
    * Date Released: 29-Jul-2003
    * Date Closed: 29-Jul-2003
    * Date Modified:

1. Impact

An unprivileged local user may be able to gain unauthorized root
privileges due to a buffer overflow in the runtime linker ld.so.1(1).

Sun acknowledges with thanks, Jouko Pynnönen (jouko@iki.fi) for bringing
this issue to our attention and iDEFENSE Inc. (www.idefense.com) for
coordinating the release of this issue.

This issue is described in iDEFENSE Advisory located at:

	http://www.idefense.com/advisory/07.29.03.txt.

2. Contributing Factors

This issue can occur in the following releases:

SPARC Platform

    * Solaris 2.6 with patch 107733-10 and without patch 107733-11
    * Solaris 7 with patches 106950-14 through 106950-22 and without patch 106950-23
    * Solaris 8 with patches 109147-07 through 109147-24 and without patch 109147-25
    * Solaris 9 without patch 112963-09

x86 Platform

    * Solaris 2.6 with patch 107734-10 and without patch 107734-11
    * Solaris 7 with patches 106951-14 through 106951-22 and without patch 106951-23
    * Solaris 8 with patches 109148-07 through 109148-24 and without patch 109148-25
    * Solaris 9 without patch 113986-05

3. Symptoms

There are no reliable symptoms that would show the described issue has
been exploited.

Solution Summary

4. Relief/Workaround

There is no workaround. Please see the "Resolution" section below.

5. Resolution

This issue is addressed in the following releases:

SPARC Platform

    * Solaris 2.6 with patch 107733-11 or later
    * Solaris 7 with patch 106950-23 or later
    * Solaris 8 with patch 109147-25 or later
    * Solaris 9 with patch 112963-09 or later

x86 Platform

    * Solaris 2.6 with patch 107734-11 or later
    * Solaris 7 with patch 106951-23 or later
    * Solaris 8 with patch 109148-25 or later
    * Solaris 9 with patch 113986-05 or later

This Sun Alert notification is being provided to you on an "AS IS" basis.
This Sun Alert notification may contain information provided by third
parties. The issues described in this Sun Alert notification may or may
not impact your system(s). Sun makes no representations, warranties, or
guarantees as to the information contained herein. ANY AND ALL WARRANTIES,
EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT,
ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU ACKNOWLEDGE THAT SUN
SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT OF YOUR USE OR FAILURE
TO USE THE INFORMATION CONTAINED HEREIN. This Sun Alert notification
contains Sun proprietary and confidential information. It is being
provided to you pursuant to the provisions of your agreement to purchase
services from Sun, or, if you do not have such an agreement, the Sun.com
Terms of Use. This Sun Alert notification may only be used for the
purposes contemplated by these agreements.

Copyright 2000-2003 Sun Microsystems, Inc., 4150 Network Circle, Santa
Clara, CA 95054 U.S.A. All rights reserved.