Description
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
References
- solaris-pfexec-gain-privileges(14988) vdb-entry
- 57453 vendor-advisory
- ESB-2004.0079 third-party-advisory
- 10755 third-party-advisory
- 1008893 vdb-entry
- 3764 vdb-entry
- 9534 vdb-entry