Sun Service Tag Registry '/var' Consumption Local Denial of Service Vulnerability

Bugtraq ID:	29561
Class:	Unknown
CVE:	CVE-2008-2552
Remote:	No
Local:	Yes
Published:	Jun 04 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	Sun Microsystems
Vulnerable:	Sun Service Tag 1.2 Sun Service Tag 1.1 Sun Service Tag 1.0
Not Vulnerable:

Sun Service Tag Registry '/var' Consumption Local Denial of Service Vulnerability

Sun Service Tag is prone to a denial-of-service vulnerability that affects the registry.

A local unprivileged attacker can exploit this issue to fill the '/var' filesystem, resulting in a denial-of-service condition.

This issue affects the following versions and platforms:

Sun Service Tag 1.0, 1.1, and 1.2 for Solaris 8, 9, and 10 on Sparc
Sun Service Tag 1.0, 1.1, and 1.2 for Solaris 10 on x86
Sun Service Tag 1.1 and 1.2 for Enterprise Linux

Sun Service Tag Registry '/var' Consumption Local Denial of Service Vulnerability

Attackers can use readily available command-line tools to exploit this issue.

Sun Service Tag Registry '/var' Consumption Local Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory. Please see the references for more information.

Sun Service Tag Registry '/var' Consumption Local Denial of Service Vulnerability

References:

• Sun Service Tag FAQ (Sun Microsystems)
  
• 238414 Security Vulnerability in Solaris 10 Service Tag Registry May Allow Denia (Sun Microsystems)