BID:4634

Solaris cachefsd Denial of Service Vulnerability

Info

Solaris cachefsd Denial of Service Vulnerability

Bugtraq ID:	4634
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0085
Remote:	Yes
Local:	No
Published:	Apr 29 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovered by Kevin Kotas.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6

Not Vulnerable:

Discussion

Solaris cachefsd Denial of Service Vulnerability

A vulnerability has been reported in the RPC server component of the Cache File System. If a RPC request for an invalid procedure is made, cachefsd will rerportedly crash. This may result in a disruption of service or possible loss of data.

Further technical details are forthcoming.

Exploit / POC

Solaris cachefsd Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.