#201513: Security Vulnerability in Solaris 10 Related to the dotoprocs() Routine

Security Vulnerability in Solaris 10 Related to the dotoprocs() Routine

Category :	Security
Release Phase :	Resolved
Product :	Solaris 10 Operating System
Bug Id :	6428658
Date of Resolved Release :	11-JAN-2008

Impact

A security vulnerability with the dotoprocs() routine in Solaris 10 may allow a local unprivileged user to panic the system.

Contributing Factors

This issue can occur in the following releases:

SPARC Platform

Solaris 10 without patch 127111-06

x86 Platform

Solaris 10 without patch 127112-06

Note: Solaris 8 and Solaris 9 are not impacted by this issue.

Symptoms

If the described issue has been exploited, the system will panic with a "BAD TRAP" error message and dotoprocs() will be found in the panic stacktrace.

Workaround

There is no workaround for this issue. Please see the "Resolution" section below.

Resolution

This issue is addressed in the following releases:

SPARC Platform

Solaris 10 with patch 127111-06 or later

x86 Platform

Solaris 10 with patch 127112-06 or later

Attachments

This solution has no attachment

Sun support customers: more support information is available after you sign in.

»	Login
»	Register
»	Lost UserName/Password

Login Required

You must login and have a valid contract to access Sun's Premium content which includes:

Sun Alerts
Bugs
Patches
Solutions
White Papers
Documentation
Support Knowledge

Login Required

You must login and have a valid contract to access Sun's contracted features

Access Legend:

(Login to access) Sun Contracted Content
Sun Contracted Feature

Please make use of SunSolve Feedback application by selecting the floating [+] to provide feedback about this specific document.

About Oracle | Oracle and Sun |