|
Sun Solaris Floating Point Context Switch Vulnerability
|
|
|
|
|
Secunia Advisory:
|
SA29728
|
|
|
Release Date:
|
2008-04-11
|
|
Last Update:
|
2008-04-15
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Manipulation of data
DoS
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Sun Solaris 10
Sun Solaris 9
|
|
| | CVE reference: | CVE-2008-1778 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
A vulnerability has been reported in Sun Solaris, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to manipulate certain data.
The vulnerability is caused due to an unspecified error in the floating point context switch implementation. This can be exploited to terminate random applications, cause incorrect floating point results in arbitrary applications, or alter the normal functionality of the memcpy(3C), memset(3C), and memmove(3C) functions in arbitrary applications.
NOTE: The impact on the functionality of the memcpy(3C), memset(3C), and memmove(3C) functions is only present on Solaris 10.
The vulnerability is reported in Solaris 9 and 10 for the x86 platform.
Solution:
Apply patches.
Solaris 9:
Apply patch 122301-23 or later.
Solaris 10:
Apply patch 127112-10 or later.
Provided and/or discovered by:
Reported by the vendor.
Changelog:
2008-04-15: Added CVE reference.
Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-233921-1
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
311 Related Secunia Security Advisories, displaying 10
|
|
|
1. Sun Solaris Print Service Unspecified Vulnerabilities
|
|
2. Sun Solaris TCP Implementation SYN Flood Denial of Service
|
|
3. Sun Solaris Tk GIF Processing Buffer Overflow Vulnerabilities
|
|
4. Sun Solaris SSH X11 Forwarding Vulnerability
|
|
5. Sun Solaris Apache Modules Cross-Site Scripting Vulnerabilities
|
|
6. Sun Solaris SCTP Denial of Service Vulnerabilities
|
|
7. Sun Solaris MySQL Multiple Vulnerabilities
|
|
8. Sun Solaris Self Encapsulated IP Packets Denial of Service
|
|
9. Sun Solaris Quagga Multiple Denial of Service Vulnerabilities
|
|
10. Sun Solaris Trusted Extensions Network Labeling Security Bypass
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
