----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Dominion SX Insecure File Permission Security Issues

SECUNIA ADVISORY ID:
SA15853

VERIFY ADVISORY:
http://secunia.com/advisories/15853/

CRITICAL:
Less critical

IMPACT:
Manipulation of data, Exposure of sensitive information

WHERE:
Local system

OPERATING SYSTEM:
Dominion SX
http://secunia.com/product/5300/

DESCRIPTION:
Dirk Wetter has reported two security issues in Dominion SX, which
can be exploited by malicious, local users to disclose sensitive
information, cause a DoS (Denial of Service), and potentially gain
escalated privileges.

1) The default file permission of "/etc/shadow" is set to
world-readable, which makes it possible to gain knowledge of the root
user's password hash.

2) The default file permission of "/bin/busybox" is set to
world-writable. This can be exploited to move or delete the file and
potentially execute arbitrary code with another user's privileges by
replacing it with a malicious file.

The security issues have been reported in DSX4, DSX8, DSX16, DSX32,
and DSXA-48.

SOLUTION:
Apply updated firmware.
http://www.raritan.com/support/sup_upgrades.aspx

PROVIDED AND/OR DISCOVERED BY:
Dirk Wetter

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------