[SunRay-Users] FYI: Two Security Vulnerabilities in SRSS 4.0 on Systems with Trusted Extensions Enabled May Allow either a Denial of Service (DoS) of the Audio Service or Unauthorized Access to Other Users' Sessions

Stoyan Angelov s_angelov_lists at filibeto.org
Thu Jul 16 19:13:49 EEST 2009


Document Audience: PUBLIC
Document ID: 253889
Title: Two Security Vulnerabilities in Sun Ray Server Software 4.0 on 
Systems with Trusted Extensions Enabled May Allow either a Denial of 
Service (DoS) of the Audio Service or Unauthorized Access to Other 
Users' Sessions
Copyright Notice: Copyright © 2009 Sun Microsystems, Inc. All Rights 
Reserved
Update Date: Wed Jul 15 00:00:00 MDT 2009
Solution Type Sun Alert

Solution  253889: Two Security Vulnerabilities in Sun Ray Server 
Software 4.0 on Systems with Trusted Extensions Enabled May Allow either 
a Denial of Service (DoS) of the Audio Service or Unauthorized Access to 
Other Users' Sessions


Bug ID: 6672502
Product: Sun Ray Server Software 4.0
Date of Resolved Release: 15-Jul-2009


SA Document Body
Two Security Vulnerabilities in Sun Ray Server Software 4.0 on Systems 
with Trusted Extensions Enabled May Allow either a Denial of Service 
(DoS) of the Audio Service or Unauthorized Access to Other Users' Sessions


1. Impact

A security vulnerability in the Sun Ray Server Software (SRSS) utaudiod 
daemon audio service may allow a local unprivileged user to cause a 
denial of audio service or possibly to execute arbitrary code with the 
privileges of the utaudiod service.  A second vulnerability, an 
information leak in the utaudiod daemon, may allow a local unprivileged 
user on a system with Trusted Extensions enabled to gain unauthorized 
access to the Sun Ray sessions of other users.

2. Contributing Factors

These issues can occur in the following releases:

SPARC Platform:

     * Sun Ray Server Software 4.0 (for Solaris 10) without patch 127553-06

x86 Platform:

     * Sun Ray Server Software 4.0 (for Solaris 10) without patch 127554-06

Notes:

1. Sun Ray Server Software 2.0, 3.0, 3.1, 3.1.1 and 4.1 are not affected 
by these issues.

To determine the version of Sun Ray Server Software on a system, the 
following command can be run:

$/opt/SUNWut/lib/utprodinfo -p SUNWuto VERSION
4.0_48

2. These issues can only occur on systems with Trusted Extensions enabled.

To determine if a system is configured with Solaris Trusted Extensions, 
the following command can be run:

$ svcs /system/labeld
STATE          STIME    FMRI
online         7:08:09  svc:/system/labeld:default

If the system is configured with Solaris Trusted Extensions, the 
"labeld" service will have an instance in the online state.

3. Symptoms

There are no predictable symptoms that would indicate the described 
vulnerabilities have been exploited.

4. Workaround

There is no workaround for these issues. Please see the Resolution 
section below.

5. Resolution

These issues are addressed in the following releases:

SPARC Platform:

     * Sun Ray Server Software 4.0 (for Solaris 10) with patch 127553-06 
or later

x86 Platform:

     * Sun Ray Server Software 4.0 (for Solaris 10) with patch 127554-06 
or later

For more information on Security Sun Alerts, see Technical Instruction 
ID 213557.

This Sun Alert notification is being provided to you on an "AS IS" 
basis. This Sun Alert notification may contain information provided by 
third parties. The issues described in this Sun Alert notification may 
or may not impact your system(s). Sun makes no representations, 
warranties, or guarantees as to the information contained herein. ANY 
AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION 
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR 
NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU 
ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT, 
INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT 
OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This Sun 
Alert notification contains Sun proprietary and confidential 
information. It is being provided to you pursuant to the provisions of 
your agreement to purchase services from Sun, or, if you do not have 
such an agreement, the Sun.com Terms of Use. This Sun Alert notification 
may only be used for the purposes contemplated by these agreements.

Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa 
Clara, CA 95054 U.S.A. All rights reserved.


document link at sun.com: 
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1




More information about the SunRay-Users mailing list