Sun Solaris Serial Console Excessive Output Data Denial of Service Vulnerability
BID:8727
Info
Sun Solaris Serial Console Excessive Output Data Denial of Service Vulnerability
| Bugtraq ID: | 8727 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 26 2003 12:00AM |
| Updated: | Sep 26 2003 12:00AM |
| Credit: | This vulnerability was disclosed in a vendor advisory. |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc |
| Not Vulnerable: | |
Discussion
Sun Solaris Serial Console Excessive Output Data Denial of Service Vulnerability
Sun Solaris Serial Console has been reported prone to a denial of service condition when handling excessive quantities of output data.
The issue occurs under undisclosed circumstances, however it has been reported that the issue will only occur on Sun systems that use the 'su' driver for serial console.
It has been conjectured that an attacker, who has access to the Sun Solaris serial console, could exploit this issue to trigger a kernel panic or system hang.
Sun Solaris Serial Console has been reported prone to a denial of service condition when handling excessive quantities of output data.
The issue occurs under undisclosed circumstances, however it has been reported that the issue will only occur on Sun systems that use the 'su' driver for serial console.
It has been conjectured that an attacker, who has access to the Sun Solaris serial console, could exploit this issue to trigger a kernel panic or system hang.
Exploit / POC
Sun Solaris Serial Console Excessive Output Data Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Solaris Serial Console Excessive Output Data Denial of Service Vulnerability
Solution:
The vendor has released a patch to address this issue:
Sun Solaris 9_x86
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 9
Solution:
The vendor has released a patch to address this issue:
Sun Solaris 9_x86
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 9
References
Sun Solaris Serial Console Excessive Output Data Denial of Service Vulnerability
References:
References: