CVE-2010-0453

Related Files

Solaris / OpenSolaris UCODE_GET_VERSION ioctl Denial Of Service

Posted Feb 9, 2010

Authored by Tobias Klein | Site trapkit.de

This is a denial of service (kernel panic) proof of concept exploit for the UCODE_GET_VERSION ioctl NULL pointer dereference vulnerability on Solaris / OpenSolaris.

tags | exploit, denial of service, kernel, proof of concept

systems | solaris

advisories | CVE-2010-0453

SHA-256 | 0bb0ba7efbaa3375e563e5bdee9caa226403113256a518e9673c3e85f5d0a27d

Download | Favorite | View

Oracle Denial Of Service

Posted Feb 2, 2010

Authored by Tobias Klein | Site trapkit.de

The kernel of Oracle Solaris contains a vulnerability in the code that handles UCODE_GET_VERSION IOCTL requests. The vulnerability allows a local unprivileged user the ability to panic a Solaris x86 Intel-based system (32-bit/64-bit mode) due to a NULL pointer dereference. The ability to panic a system is a type of Denial of Service (DoS). The issue can be triggered by sending a specially crafted IOCTL request to the kernel.

tags | advisory, denial of service, x86, kernel, local

systems | solaris

advisories | CVE-2010-0453

SHA-256 | a524a1ba9d5742e9a071414fff6dae55d1497bb58dc841e1c7577a689c3d653c

Download | Favorite | View