CERT-MU :Vulnerability

Home | Search | FAQ | Site Map | Contact Us

|| Hotline : 800 2378 || To contact CERT-MU send e-mail on --> info[at]cert-mu.gov.mu || To report incident e-mail on --> incident[at]cert-mu.gov.mu || To report Vulnerabilities send e-mail on --> Vulnerability[at]cert-mu.gov.mu ||

Charter & Mission

CERT-MU Services

Constituency

Authority

Incident Reporting

Vulnerability Reporting

Incident Statistics Forms

Vol. 2, Feb 2012

Vol. 1, Oct 2011

World CERTs

Security Sites

Security Tools

Antivirus Resources

Email Abuse

Network Abuse

Anti-Spam Initiative

Cyber Security Portal

Safer Internet Day

Computer Security Day

National Computer Board

Authorized to use CERT(TM) - CERT is a mark owned by Carnegie Mellon University

CERT-MU Vulnerability Note VN-2008-7

Vulnerability in the Solaris sendfilev() system call

Original Issue Date: September 03, 2008

Severity Rating: Low

Systems Affected

Solaris 10
OpenSolaris based upon builds snv_01 through snv_95

Overview

A vulnerability has been reported in Sun Solaris sendfilev() system call that may allow local malicious user to cause Denial of Service.

Description

sendfilev() is a system call in solaris10. A vulnerability exists in Sun Solaris, sendfilev() system call. This may allow a local user may bring the device in panic by creating a carefully crafted web-page, if Apache 2.2x is running on Solaris 10. Such attempt may leads to DoS attack.

Solution

Apply appropriate patches as suggested by vendor