Sun Solaris automountd Denial of Service Vulnerability

Bugtraq ID:	8253
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jul 23 2003 12:00AM
Updated:	Jul 23 2003 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	Sun Solaris 8_sparc
Not Vulnerable:	Sun Solaris 9 Sun Solaris 7.0 Sun Solaris 2.6

Sun Solaris automountd Denial of Service Vulnerability

Sun has released a security alert detailing a vulnerability present in automountd(1M). This vulnerability may allow local users to cause the automountd process to crash, resulting in a denial of service condition. According to Sun, systems affected are those with the following patches applied:

108993-14 through 108993-19 (SPARC) or,
108994-14 through 108994-19 (x86)

Sun Solaris automountd Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris automountd Denial of Service Vulnerability

Solution:
Sun has released patches to correct this issue. For additional information, see the referenced security alert (55340).


Sun Solaris 8_sparc

• Sun 108993-20
  sparc
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108993&rev=20


• Sun 108994-20
  x86
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108994&rev=20

Sun Solaris automountd Denial of Service Vulnerability

References:

• Free Sun Alert Notifications Article 55340 (Sun)