Sun Solaris pollwakeup(9F) Local Denial Of Service Vulnerability

Bugtraq ID:	36106
Class:	Unknown
CVE:	CVE-2009-2952
Remote:	No
Local:	Yes
Published:	Aug 21 2009 12:00AM
Updated:	Oct 15 2009 08:58PM
Credit:	Jason Hoos
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Avaya CMS Server 15.0
Not Vulnerable:	Sun OpenSolaris build snv_51

Sun Solaris pollwakeup(9F) Local Denial Of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability that affects 'pollwakeup(9F)'.

Local attackers may exploit this issue to panic a system, denying service to legitimate users.

The issue affects the following:

Solaris 10
OpenSolaris builds snv_01 through snv_50

Sun Solaris pollwakeup(9F) Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris pollwakeup(9F) Local Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.


Sun Solaris 10_x86

• Sun 141415-09
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141415-09-1

Sun Solaris 10

• Sun 141414-09
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141414-09-1

Sun Solaris pollwakeup(9F) Local Denial Of Service Vulnerability

References:

• ASA-2009-415 (Avaya)
  
• Solaris Homepage (Sun Microsystems)
  
• 265248 Solaris pollwakeup(9F) (Sun)