The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspecified attack vector that causes sh processes to crash during creation of temporary files.
secunia.com/advisories/19627
secunia.com/advisories/21493
securitytracker.com/id?1015902
sunsolve.sun.com/search/document.do?assetkey=1-26-102282-1
support.avaya.com/elmodocs2/security/ASA-2006-122.htm
www.securityfocus.com/bid/17478
www.vupen.com/english/advisories/2006/1333
exchange.xforce.ibmcloud.com/vulnerabilities/25744
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A881