A vulnerability has been identified in Sun Solaris, which could be exploited by local attackers to cause a denial of service. This issue is caused by an unspecified error in the implementation of the retrieval of Kernel statistics, which may allow a local unprivileged user to panic a vulnerable system, creating a denial of service condition.

Affected Products

Sun Solaris 8
Sun Solaris 9
Sun Solaris 10

Solution

Sun Solaris 8 (SPARC) - Apply patch 117350-50 or later
Sun Solaris 9 (SPARC) - Apply patch 122300-13 or later
Sun Solaris 10 (SPARC) - Apply patch 127111-01 or later
Sun Solaris 8 (x86) - Apply patch 117351-50 or later
Sun Solaris 9 (x86) - Apply patch 122301-13 or later
Sun Solaris 10 (x86) - Apply patch 127112-01 or later

References

http://www.vupen.com/english/advisories/2007/3543
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103064-1

Credits

Vulnerability reported by the vendor.

Changelog

2007-10-19 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.