OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability
BID:2817
Info
OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability
| Bugtraq ID: | 2817 |
| Class: | Race Condition Error |
| CVE: |
CVE-2001-1047 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 02 2001 12:00AM |
| Updated: | Jul 11 2009 06:06AM |
| Credit: | This vulnerability was announced to Bugtraq by Alexander Viro <[email protected]> on June 2, 2001. |
| Vulnerable: |
OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 |
| Not Vulnerable: | |
Discussion
OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability
OpenBSD is a BSD based operating system maintained and distributed by the OpenBSD project. OpenBSD has been designed as a secure implementation of the BSD Operating System, and offers numerous security features.
A problem with OpenBSD makes it possible for a local user to cause a kernel panic. Due to a design problem which can allow a file descriptor of a process to drop into sleep while another process sharing the same file descriptor table sets the file descriptor to null, it will cause kernel panic.
This problem results in a kernel panic, causing the system to crash and resulting in a denial of service.
OpenBSD is a BSD based operating system maintained and distributed by the OpenBSD project. OpenBSD has been designed as a secure implementation of the BSD Operating System, and offers numerous security features.
A problem with OpenBSD makes it possible for a local user to cause a kernel panic. Due to a design problem which can allow a file descriptor of a process to drop into sleep while another process sharing the same file descriptor table sets the file descriptor to null, it will cause kernel panic.
This problem results in a kernel panic, causing the system to crash and resulting in a denial of service.
Exploit / POC
OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability
References:
References: