Nortel response to Sun Solaris security vulnerability in unzip(1L)
| Description: |
Reference: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1 Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories Sun Microsystems has recently issued document 200844 (formerly Sun Alert 103150) - Security Vulnerability in unzip(1L) May Set Unintended Permissions on Extracted Files. Sun has also provided fixes for the issue. Some Nortel products contain this software as a component and thus are potentially affected by the vulnerabilities addressed. This bulletin provides a multi-product consolidated response for the Nortel products which are potentially affected. This bulletin addresses the following potential vulnerability: A security vulnerability in the unzip(1L) command may set unintended permissions on extracted files. This may allow a local unprivileged user to execute arbitrary code with the privileges of another user who runs the unzip command to extract files from a specially crafted unzip archive. |
| Type: |
Security Advisories |
| Number: |
2008008599, Rev 1 |
| Status: |
Retired |
| Date: |
2008-06-03 |
