----------------------------------------------------------------------

Secunia Network Software Inspector 2.0 (NSI) - Public Beta

16 days left of beta period.

The 1st generation of the Secunia Network Software Inspector (NSI)
has been available for corporate users for almost 1 year and its been
a tremendous success.

The 2nd generation Secunia NSI is built on the same technology as the
award winning Secunia PSI, which has already been downloaded and
installed on more than 400,000 computers world wide.

Learn more / Download (instant access):
http://secunia.com/network_software_inspector_2/

----------------------------------------------------------------------

TITLE:
Sun Solaris Floating Point Context Switch Vulnerability

SECUNIA ADVISORY ID:
SA29728

VERIFY ADVISORY:
http://secunia.com/advisories/29728/

CRITICAL:
Less critical

IMPACT:
Manipulation of data, DoS

WHERE:
Local system

OPERATING SYSTEM:
Sun Solaris 10
http://secunia.com/product/4813/
Sun Solaris 9
http://secunia.com/product/95/

DESCRIPTION:
A vulnerability has been reported in Sun Solaris, which can be
exploited by malicious, local users to cause a DoS (Denial of
Service) or to manipulate certain data.

The vulnerability is caused due to an unspecified error in the
floating point context switch implementation. This can be exploited
to terminate random applications, cause incorrect floating point
results in arbitrary applications, or alter the normal functionality
of the memcpy(3C), memset(3C), and memmove(3C) functions in arbitrary
applications.

NOTE: The impact on the functionality of the memcpy(3C), memset(3C),
and memmove(3C) functions is only present on Solaris 10.

The vulnerability is reported in Solaris 9 and 10 for the x86
platform.

SOLUTION:
Apply patches.

Solaris 9:
Apply patch 122301-23 or later.

Solaris 10:
Apply patch 127112-10 or later.

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-233921-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------