CVE-2007-6216: Race Condition
Published Dec 4, 2007
·Updated
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.
Affected Software
2 affected components
Sun Solaris=10
Sun SunOS=5.10
Remediation
Patch Available
Event History
Dec 4, 2007
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
Which systems and users are realistically exposed?
Systems running Sun Solaris 10 are affected when local users can run programs that access hardware resources. The issue is demonstrated through cfgadm and format.
2
What does an attacker need to exploit this issue?
An attacker needs local access and must trigger the race condition through programs that access hardware resources. The documented impact is a system hang, resulting in denial of service.
3
What should be done to remediate the vulnerability?
Apply the available patch for this issue.