Sun Solaris 'lp' Client Local Denial Of Service Vulnerability

Bugtraq ID:	35400
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jun 16 2009 12:00AM
Updated:	Jun 17 2009 03:19PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris 0
Not Vulnerable:

Sun Solaris 'lp' Client Local Denial Of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

Local attackers may exploit this issue to cancel print jobs, denying service to legitimate users.

This issue was a regression introduced by Solaris 10 kernel patches 127127-11 and 127128-11.

Sun Solaris 'lp' Client Local Denial Of Service Vulnerability

Local attackers can use readily available commands to exploit this issue.

Sun Solaris 'lp' Client Local Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 'lp' Client Local Denial Of Service Vulnerability

References:

• OpenSolaris Homepage (Oracle)
  
• Solaris Homepage (Sun Microsystems)
  
• Solution 247386 : Part II - Multiple Printing Regressions in Solaris 10 Kerne (Sun)