Sun Solaris Volume Manager Local Denial of Service Vulnerability

Bugtraq ID:	26376
Class:	Unknown
CVE:	CVE-2007-5921
Remote:	No
Local:	Yes
Published:	Nov 07 2007 12:00AM
Updated:	Nov 20 2007 07:04PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 10_x86 Sun Solaris 10
Not Vulnerable:

Sun Solaris Volume Manager Local Denial of Service Vulnerability

Sun Solaris is prone to an unspecified denial-of-service vulnerability.

A local unprivileged attacker can exploit this issue to cause a system panic on an affected computer, resulting in a denial-of-service condition.

This issue affects Solaris 9 and 10 for SPARC and x86 architectures.

Sun Solaris Volume Manager Local Denial of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sun Solaris Volume Manager Local Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory to address this issue. Please see the references for more information.


Sun Solaris 9_x86

• Sun 122371-07
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122371-07-1

Sun Solaris 10

• Sun 124256-03
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -124256-03-1

Sun Solaris 9

• Sun 116669-31
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116669-31-1

Sun Solaris Volume Manager Local Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• Sun Alert ID: 103143 - A Security Vulnerability in Solaris Volume Manager (SVM) (Sun Microsystems)