Sun Solaris Basic Security Module Auditing Denial Of Service Vulnerability

Bugtraq ID:	10594
Class:	Unknown
CVE:	CVE-2004-0654
Remote:	No
Local:	Yes
Published:	Jun 22 2004 12:00AM
Updated:	Jul 12 2009 05:16AM
Credit:	This issue was disclosed in the referenced vendor advisory.
Vulnerable:	Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0
Not Vulnerable:

Sun Solaris Basic Security Module Auditing Denial Of Service Vulnerability

Sun Solaris Basic Security Module is reportedly affected by a denial of service vulnerability.

This issue will allow an attacker to cause the affected kernel to panic, requiring a reboot of the system, and denying service to legitimate users.

Sun Solaris Basic Security Module Auditing Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris Basic Security Module Auditing Denial Of Service Vulnerability

Solution:
Sun has released Security Alert 57497 dealing with this issue.


Sun Solaris 7.0_x86

• Sun 106542-34
  http://sunsolve.sun.com/pub-cgi/106542-34.zip

Sun Solaris 9_x86

• Sun 116558-01
  http://sunsolve.sun.com/pub-cgi/116558-01.zip

Sun Solaris 7.0

• Sun 106541-34
  https://sunsolve.sun.com/pub-cgi/106541-34.tar

Sun Solaris 8_x86

• Sun 109008-18
  http://sunsolve.sun.com/pub-cgi/109008-18.zip

Sun Solaris 8_sparc

• Sun 109007-18
  http://sunsolve.sun.com/pub-cgi/109007-18.zip

Sun Solaris 9

• Sun 114332-12
  http://sunsolve.sun.com/pub-cgi/114332-12.zip

Sun Solaris Basic Security Module Auditing Denial Of Service Vulnerability

References:

• Sun Alert ID: 57497 (Sun Microsystems)