Sun Solaris DTrace Local Denial of Service Vulnerability

Bugtraq ID:	25151
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-4126
Remote:	No
Local:	Yes
Published:	Jul 31 2007 12:00AM
Updated:	May 07 2015 05:36PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solaris DTrace Local Denial of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

Local attackers may exploit this issue to trigger kernel panics or system hangs, denying service to legitimate users. The vendor states that this issue may be less likely (or at least more difficult) to trigger on x86-based computers.

Solaris 10 SPARC and x86 are affected by this issue.

Sun Solaris DTrace Local Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris DTrace Local Denial of Service Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue. Please see the references for more information.


Sun Solaris 10_x86

• Sun 125101-10
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-125101-10-1

Sun Solaris DTrace Local Denial of Service Vulnerability

References:

• Sun Solaris Home Page (Sun Microsystems)
  
• Sun Alert ID: 103021 (Sun)