Oracle has released a patch to remove a vulnerability in some versions of the Oracle Solaris enterprise; attackers could previously exploit this to edit the code in memory and gain full control over a machine. The original issue was reported in this year and was claimed to have been fixed at the time with the code only being revisited 2009, showing that the fix had only been partial. Information security company, Trustwave, were the ones to disclose the existing loophole to Oracle.
Oracle has released a patch to remove a vulnerability in some versions of the Oracle Solaris enterprise; attackers could previously exploit this to edit the code in memory and gain full control over a machine. The original issue was reported in 2009 and was claimed to have been fixed at the time with the code only being revisited this year, showing that the fix had only been partial. Information security company, Trustwave, were the ones to disclose the existing loophole to Oracle.