Sun Solaris /dev/poll Null Pointer Dereference Denial Of Service Vulnerability

Bugtraq ID:	5171
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 05 2002 12:00AM
Updated:	Jul 05 2002 12:00AM
Credit:	Vulnerability announced in Sun Microsystems Alert 45300.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris /dev/poll Null Pointer Dereference Denial Of Service Vulnerability

Solaris is the freely available Unix operating system distributed by Sun Microsystems.

A problem in the /dev/poll device could lead to local users crashing the system. When a program uses the /dev/poll device, the kernel may under some circumstances attempt to deference a NULL pointer. This could result in a kernel panic.

Sun Solaris /dev/poll Null Pointer Dereference Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris /dev/poll Null Pointer Dereference Denial Of Service Vulnerability

Solution:
Fixes available:


Sun Solaris 8_x86

• Sun 108529-15
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 108528-15
  http://sunsolve.sun.com

Sun Solaris /dev/poll Null Pointer Dereference Denial Of Service Vulnerability

References:

• 45300 (Sun Microsystems)