Note: This is an archival copy of Security Sun Alert 265888 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1020844.1.
Solaris 10 Operating System
Date of Workaround Release
Date of Resolved Release
A security vulnerability in the Solaris sockfs kernel module:
A security vulnerability in the Solaris sockfs kernel module may allow a local or remote unprivileged HTTP client to panic a vulnerable Solaris web server thereby resulting in a Denial of Service (DoS) to the system as a whole.
2. Contributing Factors
This issue can occur in the following releases:
Note 2: This issue only occurs if a system is configured as an HTTP server utilizing the Solaris Network Cache Accelerator (nca(1)) and has logging enabled. To determine if NCA is enabled on the system, execute the following command:
$ grep status=enabled /etc/nca/ncakmod.confPlease reference ncakmod.conf(4) for more information on configuring the NCA kernel module.
Physical interfaces registered to use the NCA feature are listed in the "/etc/nca/nca.if" file:
$ cat /etc/nca/nca.ifPlease reference nca.if(4) for more information on specifying the physical interfaces for NCA.
To determine if NCA logging is enabled, execute the following command:
$ grep status=enabled /etc/nca/ncalogd.confNote 3: OpenSolaris distributions may include additional bug fixes above and beyond the build from which it was derived. To determine the base build of OpenSolaris, the following command can be used:
$ uname -v3. Symptoms
If the described issue occurs, the system will panic with a NULL pointer dereference on nl7c_http_log. The stack trace will be similar to the following:
To work around the described issue until patches can be installed, disable logging of NCA by setting "status=disabled" in "/etc/nca/ncalogd.conf". Please refer to ncalogd.conf(4) for details.
A system reboot is required for the change to be effective. Please refer to reboot(1M) for more details.
This issue is addressed in the following releases:
Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.
26-Aug-2009: Updated Contributing Factors and Resolution sections. Updated document release phase to Workaround.
10-Sep-2009: Updated the Contributing Factors and Resolution sections. Resolved.
This solution has no attachment