Sun Solaris Full UFS File System Kernel Panic Denial Of Service Vulnerability

Bugtraq ID:	8079
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Mar 15 2002 12:00AM
Updated:	Mar 15 2002 12:00AM
Credit:	Vulnerability announced by Sun Microsystems.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6
Not Vulnerable:

Sun Solaris Full UFS File System Kernel Panic Denial Of Service Vulnerability

It has been reported that Solaris becomes unstable when specific circumstances are created in the UFS file system. This may allow an attacker to deny service to legitimate users of a vulnerable system.

Sun Solaris Full UFS File System Kernel Panic Denial Of Service Vulnerability

No exploit is required for this vulnerability.

Sun Solaris Full UFS File System Kernel Panic Denial Of Service Vulnerability

Solution:
Sun has made fixes available for this issue:


Sun Solaris 7.0

• Sun 106541-25
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=25

Sun Solaris 8_x86

• Sun 108529-14
  http://sunsolve.sun.com

Sun Solaris 8_sparc

• Sun 108528-14
  http://sunsolve.sun.com

Sun Solaris 7.0_x86

• Sun 106542-25
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=25

Sun Solaris Full UFS File System Kernel Panic Denial Of Service Vulnerability

References:

• Sun Alert ID: 43460 (Sun Microsystems)