Sun Solaris Proc Filesystem Local Denial Of Service Vulnerability

Bugtraq ID:	15115
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Oct 16 2005 12:00AM
Updated:	Oct 16 2005 12:00AM
Credit:	This vulnerability was disclosed in the referenced Sun advisory.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10
Not Vulnerable:

Sun Solaris Proc Filesystem Local Denial Of Service Vulnerability

Sun Solaris is prone to a local denial of service vulnerability.

A local unauthorized user can cause a system panic in the '/proc' filesystem and cause a denial of service.

Sun Solaris Proc Filesystem Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris Proc Filesystem Local Denial Of Service Vulnerability

Solution:
Sun Microsystems has released Sun alert ID 101987 addressing this issue for Solaris 10. Please see the referenced Web advisory for further information.


Sun Solaris 10

• Sun 118822-19
  http://sunsolve.sun.com/patches

Sun Solaris 10.0_x86

• Sun 118844-19
  http://sunsolve.sun.com/patches

Sun Solaris Proc Filesystem Local Denial Of Service Vulnerability

References:

• Solaris Product Page (Sun)
  
• Sun Alert ID: 101987 - Security Vulnerability May Allow a Local Unprivileged Use (Sun)