Note: This is an archival copy of Security Sun Alert 200163 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1000118.1.
Solaris 8 Operating System
Date of Resolved Release
Due to a security vulnerability, a local unprivileged user may be able to crash a Solaris 8 system (see below for details)
Due to a security vulnerability, a local unprivileged user may be able to crash a Solaris 8 system with a sequence of system calls or commands issued in a specific manner. The ability to crash a system is a type of Denial of Service (DoS).
2. Contributing Factors
This issue can occur in the following releases:
Note: Solaris 9 and Solaris 10 are not impacted by this issue.
If the described issue occurs, the affected system will panic and may produce a crashdump with a stack trace similar to the following:
unix:panicsys+0x44(0x10149de0, 0x2a101de5478, 0x104241e0, 0x1, 0x0, , 0x9914001603, , , , 0x10149de0, 0x2a101de5478) unix:vpanic+0xcc(0x10149de0, 0x2a101de5478, 0x3c, 0x1, 0xdb890, 0x30008166978) unix:panic+0x1c(0x10149de0, 0x104108d0, 0x3c, 0x300033af6c0, 0x0, 0x0) genunix:turnstile_block+0x360(0x30008166948, 0x0, 0x30099a4cad8, 0x104108d0, 0x0) unix:rw_enter_sleep+0x17c(0x30099a4cad8?) unix:rw_enter(0x30099a4cad8, 0x0) - frame recycled ufs:ufs_dirfixdotdot+0x1e0(0x300996dc3f8, 0x30099a4c998, 0x300039a1638) ufs:ufs_diraddentry+0xbc(0x300039a1638, 0x300045b91f1, 0x3, 0x2, 0x2a101de57a8, 0x300996dc3f8, 0x30099a4c998, 0x30026c98c10) ufs:ufs_direnter_lr+0x3ac(0x300039a1638, 0x300045b91f1, 0x3, 0x30099a4c998, 0x300996dc3f8, 0x30026c98c10) ufs:ufs_rename+0x250(, 0x3000321b1a0, 0x30002ba06c0?, 0x300045b91f1) genunix:vn_rename+0x15c(0xffbefd92, 0x26fe8, 0x0, 0xff3de7a8, 0x0, 0x1) genunix:rename+0xc(, 0x26fe8, 0xf000, 0x26540, 0x8000, 0x265d8) unix:syscall_trap32+0xa8()
There is no workaround. Please see the Resolution section below.
This issue is addressed in the following releases:
Copyright 2000-2008 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.
This solution has no attachment