SunOS LD_LIBRARY_PATH and LD_OPTIONS Vulnerability

info
discussion
exploit
solution
references

SunOS LD_LIBRARY_PATH and LD_OPTIONS Vulnerability

Solution:
For SunOS 4.1, 4.1.1 and 4.1.2:

Apply Sun Patch ID 100630-01 (login and su) and
Sun Patch ID 100377-04.

Note: PatchID 100630-01 contains the international version of
/usr/bin/login. PatchID 100631-01 contains the domestic version
of /usr/bin/login and is only available from Sun Answer Centers for
sites that use the US Encryption Kit.