Sun Solaris 10 Kernel Patches Denial of Service Vulnerability

Bugtraq ID:	19064
Class:	Unknown
CVE:	CVE-2006-3728
Remote:	No
Local:	Yes
Published:	Jul 19 2006 12:00AM
Updated:	Jun 27 2007 05:18PM
Credit:	Reported by the vendor.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10.0 Avaya Interactive Response
Not Vulnerable:

Sun Solaris 10 Kernel Patches Denial of Service Vulnerability

Sun Solaris 10 is vulnerable to a denial-of-service vulnerability.

The vendor has reported that local users on affected computers may trigger kernel panics, corrupt kernel memory, crash applications, or corrupt system files. This issue arises subsequent to the installation of certain kernel patches issued by the vendor.

A successful attack may allow attackers to trigger denial-of-service conditions.

Sun Solaris 10 Kernel Patches Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Sun Solaris 10 Kernel Patches Denial of Service Vulnerability

Solution:
Sun has released patches to address this issue.

Sun Solaris 10 Kernel Patches Denial of Service Vulnerability

References:

• Avaya Security Advisory ASA-2006-181 (Avaya)
  
• Sun Alert ID: 102344 (Sun)