Sun Cluster Global File System Denial of Service Vulnerability

Bugtraq ID:	10088
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 08 2004 12:00AM
Updated:	Apr 08 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Sun Cluster 3.1 Sun Cluster 3.0
Not Vulnerable:	Sun Cluster 2.2 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 Sun Cluster 2.1 - Sun Solaris 2.5.1 - Sun Solaris 2.6

Sun Cluster Global File System Denial of Service Vulnerability

It has been reported that Sun Cluster is prone to a denial of service issue allowing local unprivileged attackers to cause a cluster node to panic.

Sun Cluster 3.0 and 3.1 for Solaris 8 and Solaris 9 are reported to be affected by this issue.

Sun Cluster Global File System Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Cluster Global File System Denial of Service Vulnerability

Solution:
Sun has released an alert ID: 57502 with fixes to address this issue.


Sun Cluster 3.0

• Sun 110648-30
  For Solaris 8.
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=110648&rev=30


• Sun 112563-12
  For Solaris 9.
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112563&rev=12

Sun Cluster 3.1

• Sun 113800-07
  For Solaris 8.
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113800&rev=07


• Sun 113801-07
  For Solaris 9.
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113801&rev=07

Sun Cluster Global File System Denial of Service Vulnerability

References:

• Sun Alert ID: 57502 (Sun)