Sun Solaris USB Mouse STREAMS Module (usbms(7M)) Local Denial of Service Vulnerability

Bugtraq ID:	27773
Class:	Unknown
CVE:	CVE-2008-0718
Remote:	No
Local:	Yes
Published:	Feb 13 2008 12:00AM
Updated:	Feb 13 2008 09:06PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 9 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10
Not Vulnerable:

Sun Solaris USB Mouse STREAMS Module (usbms(7M)) Local Denial of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

A local unprivileged attacker can exploit this issue to cause a system panic on an affected computer, resulting in a denial-of-service condition.

Note that this issue affects only computers that are running in 64-bit mode and have a USB mouse attached.

This issue affects Solaris 9 and 10 for SPARC and x86 architectures.

Sun Solaris USB Mouse STREAMS Module (usbms(7M)) Local Denial of Service Vulnerability

An attacker can exploit this issue by interacting with an attached USB mouse.

Sun Solaris USB Mouse STREAMS Module (usbms(7M)) Local Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory to address this issue. Please see the references for more information.


Sun Solaris 9_x86

• Sun 115554-25
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -115554-25-1

Sun Solaris 9_sparc

• Sun 115553-29
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -115553-29-1

Sun Solaris 10_sparc

• Sun 123402-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -123402-01-1

Sun Solaris USB Mouse STREAMS Module (usbms(7M)) Local Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• Sun Alert ID 201316 (Sun Microsystems)