Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability
BID:35714
Info
Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability
| Bugtraq ID: | 35714 |
| Class: | Unknown |
| CVE: |
CVE-2009-2488 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 15 2009 12:00AM |
| Updated: | Jan 29 2013 08:00PM |
| Credit: | Sun |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Avaya IR 4.0 Avaya IR 3.0 Avaya CMS Server 15.0 |
| Not Vulnerable: | |
Discussion
Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability
The Sun Solaris NFSv4 kernel module is prone to an unspecified local denial-of-service vulnerability.
Local attackers may exploit this issue to panic an NFSv4 client system, denying service to legitimate users.
Note that only systems that have NFSv4 filesystems mounted are affected.
The issue affects Solaris 10 and OpenSolaris based on builds snv_102 through snv_119.
The Sun Solaris NFSv4 kernel module is prone to an unspecified local denial-of-service vulnerability.
Local attackers may exploit this issue to panic an NFSv4 client system, denying service to legitimate users.
Note that only systems that have NFSv4 filesystems mounted are affected.
The issue affects Solaris 10 and OpenSolaris based on builds snv_102 through snv_119.
Exploit / POC
Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Sun Solaris 10_x86
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Sun Solaris 10_x86
References
Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability
References:
References:
- Sun Solaris Homepage (Sun Microsystems)
- Solution 262788: Security Vulnerability in Solaris NFSv4 Kernel Module May Panic (Sun)