Note: This is an archival copy of Security Sun Alert 237986 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1019268.1.
Date of Resolved Release
A Security Vulnerability in the namefs Kernel module may result in Arbitrary Code Execution or a Denial of Service (DoS)
A security vulnerability in the namefs kernel module may allow a local unprivileged user the ability to execute arbitrary code in kernel context or panic the system. The ability to panic the system is a type of Denial of Service (DoS).
2. Contributing Factors
This issue can occur in the following releases:
There are no predictable symptoms that would indicate that the issue has been exploited to execute arbitrary code. In the case of a Denial of Service (DoS), system panics will vary if this issue is exploited. Typically, the type of panic is one of "BAD TRAP".
There is no workaround for this issue. Please see the Resolution section below.
For more information
on Security Sun Alerts, see 1009886.1.
This Sun Alert
notification is being provided to you on
an "AS IS"
basis. This Sun Alert notification may contain information provided by
third parties. The issues described in this Sun Alert notification may
or may not impact your system(s). Sun makes no representations,
warranties, or guarantees as to the information contained herein. ANY
AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU
ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT
OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This
Sun Alert notification contains Sun proprietary and confidential
information. It is being provided to you pursuant to the provisions of
your agreement to purchase services from Sun, or, if you do not have
notification may only be used for the purposes contemplated by these
Solaris 8 Operating System
Solaris 9 Operating System
Solaris 10 Operating System
This solution has no attachment