VULHUB ™

Some versions of Sun Solaris support the pkgadd command, which is used to transfer the contents of software packages from the distribution medium and install the software. For a given package, the included files are described in a pkgmap ASCII file. A file permissions issue exists in versions of Sun Solaris. Under some conditions, it is possible that pkgadd will erroneously install some files with the suid/sguid bit set. These files may additionally be owned by the user or group 'root'. This problem is related to the usage of the '?' character in the relevant pkgmap entry.

Some versions of Sun Solaris support the pkgadd command, which is used to transfer the contents of software packages from the distribution medium and install the software. For a given package, the included files are described in a pkgmap ASCII file. A file permissions issue exists in versions of Sun Solaris. Under some conditions, it is possible that pkgadd will erroneously install some files with the suid/sguid bit set. These files may additionally be owned by the user or group 'root'. This problem is related to the usage of the '?' character in the relevant pkgmap entry.