A security vulnerability in the Solaris Access Control List (ACL) (see acl(2)) implementation for UFS file systems may allow a local unprivileged user to panic a system which has a UFS filesystem. This is a type of Denial of Service (DoS).

Sun would like to acknowledge with thanks, Nils Goroll, for bringing this issue to our attention and aiding us in the development of a fix through the OpenSolaris project.

Permalink |