The Third Party Vulnerability Resolution Blog covers CVEs and patches in Systems product suite.

Sun Alert 244026 Security Vulnerability in the Process File System (proc(4)) Relating to Contract File System (contract(4)) Interaction May Lead to a System Panic or Possible Execution of Arbitrary Code by Unprivileged Users

Guest Author
Product: OpenSolaris

A security vulnerability in the process file system (proc(4)) when interacting with the contract(4) file system may allow a local unprivileged user the ability to panic the system or execute arbitrary commands with all (super-user) privileges. The ability to panic a system is a type of Denial of Service (DoS).

Sun acknowledges with thanks, Ilja van Sprundel from IOActive for bringing this issue to our attention.

This issue is also referenced in the following IOActive advisory:
State: Resolved
First released: 05-Feb-2009

Be the first to comment

Comments ( 0 )
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.