Re: Solaris patchadd(1) (3) symlink vulnerabilty

[Matthew Potter <mpotter () ATPCO COM>]

Solutions:

Well it is good policy to add patches in single user mode IF YOU CAN. I
recall seeing a warning in "install_cluster" to install in single usermode
if you can.... Maybe that was a while ago when they used to have "jumbo"
patches.

1) init S
2) patchadd



> Race Condition
> remote NO
> local YES
>
> Vulnerable: I only checked Solaris 2.7 sparc with latest install_cluster

what arch? sun4u?
uname -a ?