Solaris Event Port API Bugs May Let Local or Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1016542 |
|
SecurityTracker URL: http://securitytracker.com/id/1016542
|
|
CVE Reference:
CVE-2006-3781
(Links to External Site)
|
Updated: Jun 14 2008
|
Original Entry Date: Jul 20 2006
|
Impact:
Denial of service via local system, Denial of service via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 10
|
Description:
A vulnerability was reported in Solaris. A remote user can cause denial of service conditions. A local user can cause denial of service conditions.
The Solaris event port API contains several flaws. A local user can run an application that uses the API in a certain manner to trigger a system panic.
If the application using the API allows remote access (such as the Apache web server), then a remote user may be able to trigger a system panic.
Solaris 8 and 9 are not affected.
|
Impact:
A remote user can cause denial of service conditions.
A local user can cause denial of service conditions on the target system.
|
Solution:
Sun has issued a fix:
SPARC Platform
* Solaris 10 with patch 118833-12 or later
x86 Platform
* Solaris 10 with patch 118855-10 or later
The Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102485-1
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-102485-1 (Links to External Site)
|
Cause:
Not specified
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 20 Jul 2006 09:48:01 -0400
Subject: Security Vulnerabilities in The Solaris Event Port API May Result in a Denial of Service (DoS) Condition
|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102485-1
|
|
