Sun has acknowledged a vulnerability in Sun Solaris, which can be exploited by malicious, local users and malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error within the Solaris RPC Services Library (librpcsvc), which can be exploited by e.g.:

1) Malicious, local users to crash the automountd daemon by using it to access NFS servers with a large number of exported file systems.

Successful exploitation results in a DoS due to prohibited access to the networked file system, but requires that automatic mount points for NFS servers with a large number of exports are set up.

2) Malicious users to crash the mountd daemon by using it on an NFS server with a large number of exported file systems or long access lists.

Successful exploitation results in a DoS due to prohibited access to the networked file system, but requires that the system is configured as NFS server with a large number of exported file systems or long access lists.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103082-1

Deep Links
Links available to Secunia VIM customers