|
|
>> Sun Solaris namefs Kernel Module Code Execution and DoS Issue
|
Title : Sun Solaris namefs Kernel Module Code Execution and DoS Issue
VUPEN ID : VUPEN/ADV-2008-2290
CVE ID : CVE-2008-3450
Rated as : Moderate Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2008-08-05
|
A vulnerability has been identified in Sun Solaris, which could be exploited by local attackers to cause a denial of service or gain elevated privileges. This issue is caused by an unspecified error in the namefs kernel module, which may allow a local unprivileged user the ability to execute arbitrary code in kernel context or panic a vulnerable system, creating a denial of service condition.
Affected Products
Sun Solaris 8
Sun Solaris 9
Sun Solaris 10
Solution
Sun Solaris 8 (SPARC) - Apply patch 114984-02
Sun Solaris 9 (SPARC) - Apply patch 114971-03
Sun Solaris 10 (SPARC) - Apply patch 136716-01
Sun Solaris 8 (x86) - Apply patch 114985-02
Sun Solaris 9 (x86) - Apply patch 138570-01
Sun Solaris 10 (x86) - Apply patch 136717-01
References
http://www.vupen.com/english/advisories/2008/2290
http://sunsolve.sun.com/search/document.do?assetkey=1-66-237986-1
ChangeLog
2008-08-05 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
