CVE:CVE-2009-2430
CNNVD:CNNVD-200907-170
Solaris是一款由Sun开发和维护的商业UNIX操作系统。
对于所分配的RBAC执行配置文件为auditconfig(1M)指定了额外权限(如Audit Control配置文件)的本地用户，Solaris auditconfig(1M)命令中的安全漏洞可能允许以RBAC配置文件中所指定的权限执行任意命令。这个漏洞仅影响启用了Solaris Auditing的系统。
solution:Upgrade sun opensolaris to a higher version than snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,and avoid the version snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58; Upgrade sun solaris to a higher version than 8,9,10,and avoid the version 8,9,10