The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Software | From | Fixed in |
---|---|---|
sun / sunos | 5.4 | 5.4.x |
sun / sunos | 5.5 | 5.5.x |
sun / sunos | 5.5.1 | 5.5.1.x |
sun / solaris | 2.4 | 2.4.x |
sun / solaris | 2.5 | 2.5.x |
sun / solaris | 2.5.1 | 2.5.1.x |
sun / solaris | 2.6 | 2.6.x |