Sun Solaris 10 STREAM Administrative Driver Denial of Service Vulnerability

Bugtraq ID:	29326
Class:	Race Condition Error
CVE:	CVE-2008-2418
Remote:	No
Local:	Yes
Published:	May 21 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solaris 10 STREAM Administrative Driver Denial of Service Vulnerability

Sun Solaris is prone to a denial-of-service vulnerability due to a race-condition error.

An attacker can exploit this issue to cause the affected kernel to panic, resulting in a denial-of-service condition.

This issue affects the Solaris 10 operating system.

Sun Solaris 10 STREAM Administrative Driver Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 10 STREAM Administrative Driver Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory. Please see the references for more information.

Sun Solaris 10 STREAM Administrative Driver Denial of Service Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• Sun Alert 237584: A Security Vulnerability in the Solaris 10 STREAMS Administrat (Sun)