Sun Solaris审核竞争条件本地拒绝服务漏洞

漏洞起因
竞争条件错误
 
影响系统
Sun Solaris 9_x86
Sun Solaris 9
Sun Solaris 10_x86
Sun Solaris 10
Sun OpenSolaris build snv_99
Sun OpenSolaris build snv_96
Sun OpenSolaris build snv_95
Sun OpenSolaris build snv_94
Sun OpenSolaris build snv_93
Sun OpenSolaris build snv_92
Sun OpenSolaris build snv_91
Sun OpenSolaris build snv_90
Sun OpenSolaris build snv_89
Sun OpenSolaris build snv_88
Sun OpenSolaris build snv_87
Sun OpenSolaris build snv_86
Sun OpenSolaris build snv_85
Sun OpenSolaris build snv_84
Sun OpenSolaris build snv_83
Sun OpenSolaris build snv_82
Sun OpenSolaris build snv_81
Sun OpenSolaris build snv_80
Sun OpenSolaris build snv_78
Sun OpenSolaris build snv_77
Sun OpenSolaris build snv_76
Sun OpenSolaris build snv_68
Sun OpenSolaris build snv_67
Sun OpenSolaris build snv_64
Sun OpenSolaris build snv_61
Sun OpenSolaris build snv_59
Sun OpenSolaris build snv_58
Sun OpenSolaris build snv_57
Sun OpenSolaris build snv_54
Sun OpenSolaris build snv_50
Sun OpenSolaris build snv_49
Sun OpenSolaris build snv_47
Sun OpenSolaris build snv_45
Sun OpenSolaris build snv_41
Sun OpenSolaris build snv_39
Sun OpenSolaris build snv_36
Sun OpenSolaris build snv_29
Sun OpenSolaris build snv_22
Sun OpenSolaris build snv_19
Sun OpenSolaris build snv_13
Sun OpenSolaris build snv_120
Sun OpenSolaris build snv_119
Sun OpenSolaris build snv_118
Sun OpenSolaris build snv_117
Sun OpenSolaris build snv_116
Sun OpenSolaris build snv_115
Sun OpenSolaris build snv_114
Sun OpenSolaris build snv_113
Sun OpenSolaris build snv_112
Sun OpenSolaris build snv_111a
Sun OpenSolaris build snv_111
Sun OpenSolaris build snv_110
Sun OpenSolaris build snv_109
Sun OpenSolaris build snv_108
Sun OpenSolaris build snv_107
Sun OpenSolaris build snv_106
Sun OpenSolaris build snv_105
Sun OpenSolaris build snv_104
Sun OpenSolaris build snv_103
Sun OpenSolaris build snv_102
Sun OpenSolaris build snv_101a
Sun OpenSolaris build snv_101
Sun OpenSolaris build snv_100
Sun OpenSolaris build snv_02
Sun OpenSolaris build snv_01
 
不受影响系统
Sun OpenSolaris build snv_121
 
危害
本地攻击者可以利用漏洞使系统崩溃。
 
攻击所需条件
攻击者必须访问Sun Solaris。
 
漏洞信息
Sun Solaris是一款商业性质的操作系统。
当与扩展文件属性(fsattr(5))交互时Solaris Auditing存在竞争条件错误,本地非特权用户可以使系统触发panic,造成拒绝服务攻击。
目前没有详细漏洞细节提供。
 
测试方法
 
厂商解决方案
用户可参考如下安全公告获得补丁信息:
Sun Solaris 10
Sun 140921-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -140921-02-1
Sun Solaris 10_x86
Sun 140922-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -140922-02-1
Sun Solaris 9
Sun 122300-42
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122300-42-1
Sun Solaris 9_x86
Sun 122301-42
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122301-42-1
 
漏洞提供者
Sun

发表评论?

0 条评论。

发表评论