首页 -> 安全研究
安全研究
安全漏洞
Sun Solaris系统错误本地拒绝服务攻击漏洞
发布日期:2002-12-04
更新日期:2002-12-11
受影响系统:
Sun Solaris kernel描述:
- Sun Solaris 9.0
- Sun Solaris 8.0
- Sun Solaris 8.0 x86
- Sun Solaris 7.0
- Sun Solaris 7.0 x86
- Sun Solaris 2.6
- Sun Solaris 2.6 x86
- Sun Solaris 2.5.1
- Sun Solaris 2.5.1 x86
BUGTRAQ ID: 6309
CVE(CAN) ID: CVE-2002-1586
Solaris是一款由Sun microsystems公司开发和维护的商业性质UNIX操作系统。
Solaris由于NULL指针废弃操作时存在问题,本地攻击者可以利用这个漏洞导致内核崩溃,产生拒绝服务。
由于此漏洞引起的错误信息如下:
BAD TRAP: type=31 rp=2a1006b7480 addr=9a mmu_fsr=0 occurred in module
"genunix" due to a NULL pointer dereference
堆栈跟踪如下所示:
<trap>genunix:struioget+0x14 (0x300011038b8, 0x30001b19bc0, 0x2a1006b7730, 0x0,...)
genunix:strput+0x478 (0x0, 0x2a1006b7a00, 0x300011038b8, 0x8, 0x0, 0x0)
genunix:strwrite+0x200 (0x850, 0x2a1006b7930, 0x30000564e48, 0x1000000, ...)
genunix:write+0x204 (0x10874, 0x14, 0x3, 0x30001444818, 0x3, 0x14)
genunix:write32+0x30 (0x3, 0xfec07cb0, 0x14, 0x7efefeff, 0x81010100, 0xff0000)
unix:syscall_trap32+0xa8 (0x3, 0xfec07cb0, 0x14, 0x7efefeff, 0x81010100, 0xff000
目前没有获得详细漏洞细节。
<*来源:Sun Alert.
链接:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F48267
*>
建议:
厂商补丁:
Sun
---
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
Sun Solaris 2.5.1 _x86:
Sun Solaris 2.5.1:
Sun Solaris 2.6 _x86:
Sun Patch 105181-33
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105181&rev=33
Sun Patch 105182-33
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105182&rev=33
Sun Solaris 2.6:
Sun Patch 105181-33
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105181&rev=33
Sun Solaris 7.0 _x86:
Sun Patch 106542-21
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=21
Sun Solaris 7.0:
Sun Patch 106541-21
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=21
Sun Solaris 8.0 _x86:
Sun Patch 108529-17
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108529&rev=17
Sun Solaris 8.0:
Sun Patch 108528-17
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108528&rev=17
Sun Solaris 9.0:
Sun Patch 112233-02
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112233&rev=02
浏览次数:2754
严重程度:0(网友投票)
绿盟科技给您安全的保障