Sun OpenSolaris 'posix_fallocate(3C)' System Call Local Denial Of Service Vulnerability

Bugtraq ID:	33267
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jan 14 2009 12:00AM
Updated:	Jan 14 2009 07:12PM
Credit:	The vendor
Vulnerable:	Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29
Not Vulnerable:	Sun OpenSolaris build snv_91

Sun OpenSolaris 'posix_fallocate(3C)' System Call Local Denial Of Service Vulnerability

Sun OpenSolaris is prone to a local denial-of-service vulnerability.

Local attackers may exploit this issue to cause a kernel panic, denying service to legitimate users.

Sun OpenSolaris 'posix_fallocate(3C)' System Call Local Denial Of Service Vulnerability

Attackers can use readily available commands to exploit this issue.

Sun OpenSolaris 'posix_fallocate(3C)' System Call Local Denial Of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Sun OpenSolaris 'posix_fallocate(3C)' System Call Local Denial Of Service Vulnerability

References:

• OpenSolaris Homepage (Oracle)
  
• Solution 239188 : Security Vulnerability Relating to the posix_fallocate(3C) (Sun)