Sun Solaris SendFileV Local Denial Of Service Vulnerability

Bugtraq ID:	10202
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Apr 23 2004 12:00AM
Updated:	Apr 23 2004 12:00AM
Credit:	The vendor announced this vulnerability.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris SendFileV Local Denial Of Service Vulnerability

Sun have reported that an unspecified vulnerability exists in the implementation of the sendfilev() function. This vulnerability may be triggered by a local unprivileged user to trigger a system panic.

This vulnerability is reported to affect Sun Solaris versions 8, and 9 on x86 and SPARC platforms.

Sun Solaris SendFileV Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris SendFileV Local Denial Of Service Vulnerability

Solution:
The vendor has released patches to address this issue:


Sun Solaris 9_x86

• Sun 112234-12
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112234&rev=12

Sun Solaris 8_x86

• Sun 108529-19
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 108528-27
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108528&rev=27

Sun Solaris 9

• Sun 112233-12
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112233&rev=12

Sun Solaris SendFileV Local Denial Of Service Vulnerability

References:

• Sun Alert ID: 57470 - Security Vulnerability With the Extended Library Function (Sun)