Sun Solaris HSFS Filesystem Local Denial Of Service Vulnerability

Bugtraq ID:	16826
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Feb 25 2006 12:00AM
Updated:	Sep 01 2006 08:23PM
Credit:	This vulnerability was disclosed in the referenced Sun advisory.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10.0_x86 Sun Solaris 10
Not Vulnerable:

Sun Solaris HSFS Filesystem Local Denial Of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

A local unprivileged attacker can cause a system panic in the 'hsfs' module. This will crash the computer, denying further service to legitimate users. Arbitrary code execution may also be possible.

Sun Solaris HSFS Filesystem Local Denial Of Service Vulnerability

An exploit is not required.

Sun Solaris HSFS Filesystem Local Denial Of Service Vulnerability

Solution:
Sun has released a security advisory addressing this issue. Please see the referenced vendor advisory for more information.


Sun Solaris 9_x86

• Sun 121995-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121995-01-1

Sun Solaris 8_x86

• Sun 109765-06
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109765-06-1

Sun Solaris 10

• Sun 119596-03
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119596-03-1

Sun Solaris 10.0_x86

• Sun 118813-03
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118813-03-1

Sun Solaris 8_sparc

• Sun 109764-06
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109764-06-1

Sun Solaris 9

• Sun 116047-03
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116047-03-1

Sun Solaris HSFS Filesystem Local Denial Of Service Vulnerability

References:

• Solaris Product Page (Sun)
  
• Sun Alert ID: 102161 (Sun)