Sun Solaris Local Fopen() Denial Of Service Vulnerability

Bugtraq ID:	13752
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Mar 19 2002 12:00AM
Updated:	Mar 19 2002 12:00AM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Sun SunOS 5.8 _x86 Sun SunOS 5.8 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 2.8
Not Vulnerable:

Sun Solaris Local Fopen() Denial Of Service Vulnerability

Sun Solaris is susceptible to a local fopen() denial of service vulnerability. This issue is due to a failure of the operating system to handle exceptional conditions.

This vulnerability allows local attackers to crash affected computers, denying service to legitimate users.

Sun describes this issue as: "4445656 UNIX98: fopen() calls on unused major/minor device numbers causes panic"

Sun Solaris Local Fopen() Denial Of Service Vulnerability

An exploit is not required.

Sun Solaris Local Fopen() Denial Of Service Vulnerability

Solution:
Sun has released patches to resolve this issue:


Sun Solaris 8_x86

• Sun 111589-02
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-111589-02-1

Sun Solaris 8_sparc

• Sun 111588-02
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-111588-02-1

Sun Solaris 2.8

• Sun 111588-02
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-111588-02-1

Sun SunOS 5.8

• Sun 111588-02
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-111588-02-1

Sun SunOS 5.8 _x86

• Sun 111589-02
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-111589-02-1

Sun Solaris Local Fopen() Denial Of Service Vulnerability

References:

• Solaris[tm] Product Line (Sun Microsystems)