Sun Solaris 9 'fstat(2)' System Call Local Denial Of Service Vulnerability

Bugtraq ID:	34979
Class:	Unknown
CVE:	CVE-2009-1673
Remote:	No
Local:	Yes
Published:	May 14 2009 12:00AM
Updated:	Apr 13 2015 09:10PM
Credit:	Sun
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Avaya CMS Server 14.1 Avaya CMS Server 14.0
Not Vulnerable:

Sun Solaris 9 'fstat(2)' System Call Local Denial Of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

Attackers may exploit this issue to panic a system, denying service to legitimate users.

This issue affects Solaris 9.

Sun Solaris 9 'fstat(2)' System Call Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 9 'fstat(2)' System Call Local Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Sun Solaris 9 'fstat(2)' System Call Local Denial Of Service Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• ASA-2009-188 Vulnerability in Solaris 9 fstat(2) System Call (Avaya)