Solaris vuidmice STREAMS Modules Bug Lets Local Users Deny Service

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1018781

SecurityTracker URL: http://securitytracker.com/id/1018781

CVE Reference: CVE-2007-5319 (Links to External Site)

Updated: Mar 20 2008

Original Entry Date: Oct 9 2007

Impact: Denial of service via local system

Fix Available: Yes Vendor Confirmed: Yes

Version(s): 8, 9, 10

Description: A vulnerability was reported in Solaris. A local user can cause denial of service conditions.

A local user with access to the system console device can exploit a flaw in the vuidmice(7M) STREAMS modules to cause the console to become unusable.

The SPARC platform is not affected.

Impact: A local user can cause the console to become unusable.

Solution: Sun has issued the following fixes.

x86 Platform

* Solaris 8 with patch 114154-02 or later
* Solaris 9 with patch 117419-03 or later
* Solaris 10 with patch 127751-01 or later

The Sun advisory is available at:

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103065-1

Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-103065-1 (Links to External Site)

Cause: Not specified

Message History: None.

Date: Mon, 8 Oct 2007 23:28:32 -0400
Subject: Security Vulnerability in the vuidmice(7M) STREAMS Modules May Lead to a Denial of Service (DoS) Condition


http://sunsolve.sun.com/search/document.do?assetkey=1-26-103065-1