martin carpenter

contents

sun cluster vulnerability

2009/09/22

tags: solaris cluster vulnerability clsetup(1CL) CVE-2009-3433

exploit details

Weak vulnerability, trivially exploitable: clsetup is a setuid root ksh script, world read/executable. Solaris' kernel makes no restriction on setuid scripts (although there are some restrictions in individual shipped interpreters, eg /bin/csh).

timeline

• 2009/02/24 reported to Sun
• 2009/02/26 acknowedged by Sun
• 2009/09/22 Sun published resolution

advisories

• Sun Alert 267148
• CVE-2009-3433