Sun Solaris cpc(3CPC) Sub-System Local Denial of Service Vulnerabilities

Bugtraq ID:	27941
Class:	Race Condition Error
CVE:	CVE-2008-0933
Remote:	No
Local:	Yes
Published:	Feb 14 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Avaya Interactive Response 3.0 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris cpc(3CPC) Sub-System Local Denial of Service Vulnerabilities

Sun Solaris is prone to two denial-of-service vulnerabilities because of race-condition errors.

A local unprivileged attacker can exploit these issues to cause a system panic on an affected computer, resulting in denial-of-service conditions.

These issues affect Solaris 10 for SPARC and x86 architectures.

Sun Solaris cpc(3CPC) Sub-System Local Denial of Service Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris cpc(3CPC) Sub-System Local Denial of Service Vulnerabilities

Solution:
Sun has released patches and an advisory. Please see the references for more information.


Sun Solaris 10_x86

• Sun 127112-08
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-127112-08-1

Sun Solaris cpc(3CPC) Sub-System Local Denial of Service Vulnerabilities

References:

• Solaris Homepage (Sun Microsystems)
  
• Solution 231466 : Two Security Vulnerabilities Exist Within the cpc(3CPC) Su (Sun Microsystems)
  
• ASA-2008-105 - Two Security Vulnerabilities Exist Within the cpc(3CPC) Sub-Syste (Avaya)