A vulnerability has been identified in Sun Solaris, which could be exploited by local attackers to cause a denial of service. This issue is caused by an error in the Solaris Auditing feature when configured to audit certain audit classes, which could be exploited by malicious users to crash an affected system, creating a denial of service condition.

Affected Products

Sun Solaris 9

Solution

Sun Solaris 9 (SPARC) - Apply patch 122300-06 or later
Sun Solaris 9 (x86) - Apply patch 122301-06 or later

References

http://www.vupen.com/english/advisories/2007/1611
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102900-1

Credits

Vulnerability reported by the vendor

Changelog

2007-05-02 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.