=====================================================================
                                 CERT-Renater

                      Note d'Information No. 2003/VULN401
_____________________________________________________________________

DATE                      : 12/12/2003

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Systems running ed(1).
                            
======================================================================


Sun(sm) Alert Notification
Sun Alert ID: 57443

Synopsis:  Text Editor ed(1) Creates Temporary Files in an Unsafe
          Manner

Category: Security
Product: Solaris
BugIDs: 4397459
Avoidance: Patch
State: Resolved
Date Released: 10-Dec-2003
Date Closed: 10-Dec-2003
Date Modified:

1. Impact

   Unprivileged local users may be able to overwrite or create any
   file on the system if "root" uses the text editor ed(1).

2. Contributing Factors

   This issue can occur in the following releases:

   SPARC Platform

   Solaris 2.6 without patch 115563-01
   Solaris 7 without patch 115565-01
   Solaris 8 without patch 110903-06

   x86 Platform

   Solaris 2.6 without patch 115564-01
   Solaris 7 without patch 115566-01
   Solaris 8 without patch 110904-06

   Note:  Solaris 9 is not affected by this issue.

3. Symptoms

   There are no symptoms that would show the vulnerability in ed(1)
   has been exploited, as it depends on which file was overwritten or
   created.

   Solution Summary Top

4. Relief/Workaround

   There is no workaround.  Please see the "Resolution" section
   below.

5. Resolution

   This issue is addressed in the following releases:

   SPARC Platform

   Solaris 2.6 with patch 115563-01 or later
   Solaris 7 with patch 115565-01 or later
   Solaris 8 with patch 110903-06 or later

   x86 Platform

   Solaris 2.6 with patch 115564-01 or later
   Solaris 7 with patch 115566-01 or later
   Solaris 8 with patch 110904-06 or later

   This Sun Alert notification is being provided to you on an "AS IS"
   basis.  This Sun Alert notification may contain information
   provided by third parties.  The issues described in this Sun Alert
   notification may or may not impact your system(s).  Sun makes no
   representations, warranties, or guarantees as to the information
   contained herein.  ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED,
   INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY,
   FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE HEREBY
   DISCLAIMED.  BY ACCESSING THIS DOCUMENT YOU ACKNOWLEDGE THAT SUN
   SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
   PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT OF YOUR USE OR
   FAILURE TO USE THE INFORMATION CONTAINED HEREIN.  This Sun Alert
   notification contains Sun proprietary and confidential
   information.  It is being provided to you pursuant to the
   provisions of your agreement to purchase services from Sun, or, if
   you do not have such an agreement, the Sun.com Terms of Use.  This
   Sun Alert notification may only be used for the purposes
   contemplated by these agreements.

   Copyright 2000-2003 Sun Microsystems, Inc., 4150 Network Circle,
   Santa Clara, CA 95054 U.S.A.  All rights reserved.

======================================================================

        =========================================================
        Les serveurs de référence du CERT-Renater
        http://www.urec.fr/securite
        http://www.cru.fr/securite
        http://www.renater.fr 
	=========================================================
	+ CERT-RENATER		| tel : 01-53-94-20-44		+
	+ 151 bd de l'Hopital	| fax : 01-53-94-20-41		+
	+ 75013 Paris		| email: certsvp@renater.fr	+
	=========================================================