A security vulnerability may allow a local unprivileged user to disable the syslog(3c) function, resulting in the failure of messages to be written to the system log. Disabling of system logging constitutes a Denial of Service (DoS).

This issue can occur in the following releases:

SPARC Platform

• Solaris 8 without patch 117350-38
• Solaris 9 without patch 118558-29
• Solaris 10 without patch 118833-19

x86 Platform

• Solaris 8 without patch 117351-38
• Solaris 9 without patch 118559-29
• Solaris 10 without patch 118855-16

Messages written by the logger(1) utility or applications calling syslog(3c) do not appear in the log files configured in syslog.conf(4).

There is no workaround for this issue. Please see the Resolution section below.

This issue is addressed in the following releases:

SPARC Platform

• Solaris 8 with patch 117350-38 or later
• Solaris 9 with patch 118558-29 or later
• Solaris 10 with patch 118833-19 or later

x86 Platform

• Solaris 8 with patch 117351-38 or later
• Solaris 9 with patch 118559-29 or later
• Solaris 10 with patch 118855-16 or later

This solution has no attachment