发布日期：2002-12-04
更新日期：2002-12-11

受影响系统：

Sun Solaris kernel
    - Sun Solaris 9.0
    - Sun Solaris 8.0
    - Sun Solaris 8.0 x86
    - Sun Solaris 7.0
    - Sun Solaris 7.0 x86
    - Sun Solaris 2.6
    - Sun Solaris 2.6 x86
    - Sun Solaris 2.5.1
    - Sun Solaris 2.5.1 x86

描述：

---

BUGTRAQ  ID: 6309
CVE(CAN) ID: CVE-2002-1586

Solaris是一款由Sun microsystems公司开发和维护的商业性质UNIX操作系统。

Solaris由于NULL指针废弃操作时存在问题，本地攻击者可以利用这个漏洞导致内核崩溃，产生拒绝服务。

由于此漏洞引起的错误信息如下：

    BAD TRAP: type=31 rp=2a1006b7480 addr=9a mmu_fsr=0 occurred in module
        "genunix" due to a NULL pointer dereference                                                

堆栈跟踪如下所示：

    <trap>genunix:struioget+0x14 (0x300011038b8, 0x30001b19bc0, 0x2a1006b7730, 0x0,...)
    genunix:strput+0x478 (0x0, 0x2a1006b7a00, 0x300011038b8, 0x8, 0x0, 0x0)
    genunix:strwrite+0x200 (0x850, 0x2a1006b7930, 0x30000564e48, 0x1000000, ...)
    genunix:write+0x204 (0x10874, 0x14, 0x3, 0x30001444818, 0x3, 0x14)
    genunix:write32+0x30 (0x3, 0xfec07cb0, 0x14, 0x7efefeff, 0x81010100, 0xff0000)
    unix:syscall_trap32+0xa8 (0x3, 0xfec07cb0, 0x14, 0x7efefeff, 0x81010100, 0xff000                                                


目前没有获得详细漏洞细节。

<*来源：Sun Alert.
  
  链接：http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F48267
*>

建议：

---

厂商补丁：

Sun
---
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Sun Solaris 2.5.1 _x86:
Sun Solaris 2.5.1:
Sun Solaris 2.6 _x86:

Sun Patch 105181-33
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105181&rev=33

Sun Patch 105182-33
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105182&rev=33

Sun Solaris 2.6:

Sun Patch 105181-33
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105181&rev=33

Sun Solaris 7.0 _x86:

Sun Patch 106542-21
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=21

Sun Solaris 7.0:

Sun Patch 106541-21
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=21

Sun Solaris 8.0 _x86:

Sun Patch 108529-17
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108529&rev=17

Sun Solaris 8.0:

Sun Patch 108528-17
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108528&rev=17

Sun Solaris 9.0:

Sun Patch 112233-02
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112233&rev=02

浏览次数：2754
严重程度：0（网友投票）