Full Disclosure mailing list archives
Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability
From: 3APA3A <3APA3A () SECURITY NNOV RU>
Date: Thu, 4 Oct 2007 20:38:51 +0400
Dear iDefense Labs, --Wednesday, October 3, 2007, 6:32:03 PM, you wrote to vulnwatch () vulnwatch org: iL> The vulnerability exists in the kernel ioctl() handler for FIFOs. The iL> I_PEEK ioctl is used to peek at a number of bytes contained in the FIFO iL> without actually removing them from the queue. One of the arguments to iL> this command, which represents the number of bytes to peek, is a signed iL> integer value. Since this parameter is not properly validated, a iL> negative value can cause large amounts of kernel memory to be leaked. Can you please clarify this issue? According to subject it looks like information leak (information disclosure) issue, while according to description, it looks more like memory leak (Denial of Service) issue. -- ~/ZARAZA http://securityvulns.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability iDefense Labs (Oct 03)
- Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability 3APA3A (Oct 04)
- <Possible follow-ups>
- Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability iDefense Labs (Oct 04)