Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files.

SunOS 5.10_x86: /usr/bin/dircmp patch.
Date this patch was last updated by Sun : Mar/19/09

SunOS 5.10: /usr/bin/dircmp patch.
Date this patch was last updated by Sun : Mar/19/09

SunOS 5.9: usr/bin/dircmp patch.
Date this patch was last updated by Sun : Mar/19/09

SunOS 5.9_x86: usr/bin/dircmp patch.
Date this patch was last updated by Sun : Mar/19/09

SunOS 5.8_x86: usr/bin/dircmp patch.
Date this patch was last updated by Sun : Mar/19/09

SunOS 5.8: usr/bin/dircmp patch.
Date this patch was last updated by Sun : Mar/19/09

ID	Name	Product	Family	Severity
108023	Solaris 10 (x86) : 141015-01	Nessus	Solaris Local Security Checks	medium
107525	Solaris 10 (sparc) : 141014-01	Nessus	Solaris Local Security Checks	medium
38075	Solaris 9 (sparc) : 138896-01	Nessus	Solaris Local Security Checks	medium
37711	Solaris 9 (x86) : 138897-01	Nessus	Solaris Local Security Checks	medium
37644	Solaris 8 (x86) : 140838-01	Nessus	Solaris Local Security Checks	medium
37297	Solaris 10 (x86) : 141015-01	Nessus	Solaris Local Security Checks	medium
36861	Solaris 10 (sparc) : 141014-01	Nessus	Solaris Local Security Checks	medium
36494	Solaris 8 (sparc) : 140837-01	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2009-1207

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium