Lucene search
K

solaris.7.procfs.dos.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 42 Views

Solaris 7 procfs bug allows unprivileged users to crash systems with specific commands.

Code
`Date: Tue, 9 Mar 1999 22:17:19 +0200  
From: Toomas Soome <[email protected]>  
To: [email protected]  
Subject: 64 bit Solaris 7 procfs bug  
  
hi!  
  
there is bug with 64 bit solaris 7 procfs, every [nonprivileged] user can  
crash computer with command 'more /proc/self/psinfo'. Tested with UE3000,  
U10, UE450. This bug has been reported to Sun, with no response.  
  
toomas soome  
Tartu University, Estonia  
--  
When a man steals your wife, there is no better revenge than to let him  
keep her.  
-- Sacha Guitry  
  
----------------------------------------------------------------------------  
  
Date: Wed, 10 Mar 1999 15:06:27 -0700  
From: Ed Arnold <[email protected]>  
To: [email protected]  
Subject: Re: 64 bit Solaris procfs bug  
  
It was previously reported on bugtraq that the command  
"/usr/xpg4/bin/more /proc/self/psinfo" will crash U10, UE3000,  
etc. running SunOS 5.7.  
  
Sun is aware of this (has assigned a bugid):  
  
>Filed approximately 10 seconds ago, the bugid is 4219071. Most likely it  
>won't be visible to the outside for a while.  
  
----------------------------------------------------------------------------  
  
Date: Thu, 11 Mar 1999 17:08:24 +0200  
From: Toomas Soome <[email protected]>  
To: [email protected]  
Subject: Re: 64 Bit Solaris 7 procfs bug  
  
Hi!  
  
some more information about this very issue.  
  
both (32bit,64bit) sparc versions of Solaris 7 can be crashed by  
unprivileged user. /usr/xpg4/bin/more command will trigger the bug. FYI  
I got message from Sun kernel developer team member only minutes after  
my e-mail to bugtraq and after some consultation they were able to  
reproduce bug and find the cause, so expect patch soon.  
  
intel version of solaris 7 seems to be immune to this bug, however.  
  
with this, I'd like to close this issue. please send questions about  
this not for me, but Sun :)  
  
toomas  
--  
"It is easier for a camel to pass through the eye of a needle if it is  
lightly greased."  
-- Kehlog Albran, "The Profit"  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation