VUPEN - Sun OpenSolaris Security Update Fixes Automake File Manipulation / Exploit (Security Advisories

	About Us \| Contact Us

VUPEN Free Resources

VUPEN Security Advisories

VUPEN Security Blog & News

Zero-day Attacks Monitor

Daily Security Mailinglist

Explanation of Terms

Advanced Search Engine

Sun OpenSolaris Security Update Fixes Automake File Manipulation

VUPEN ID	VUPEN/ADV-2010-0210
CVE ID	CVE-2009-4029
CWE ID	Available in VUPEN VNS Customer Area
CVSS V2	Available in VUPEN VNS Customer Area
Rated as	Low Risk
Impact	Available in VUPEN VNS Customer Area
Authentication Level	Available in VUPEN VNS Customer Area
Access Vector	Available in VUPEN VNS Customer Area
Release Date	2010-01-25
Share

Technical Description

A vulnerability has been identified in Sun OpenSolaris, which could be exploited by local attackers to gain elevated privileges. This issue is caused by an error in Automake. For additional information, see : VUPEN/ADV-2009-3579

Affected Products

Sun OpenSolaris builds snv_71 through snv_131

Solution

Upgrade to build snv_132 or later.

References

http://www.vupen.com/english/advisories/2010/0210
http://sunsolve.sun.com/search/document.do?assetkey=1-66-275650-1

Changelog

2010-01-25 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

Monthly Statistics

VUPEN Security Advisories By Criticality: Aug 2010
Critical Risk	: 0%
High Risk	: 0%
Moderate Risk	: 0%
Low Risk	: 100%

Get a real-time view of the vulnerabilities affecting your systems using the VUPEN VNS reporting capabilities.

Try VUPEN VNS