Description
The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function.
References
- ADV-2009-0765 vdb-entry
- ADV-2009-0635 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm
- 252469 vendor-advisory
- 1021819 vdb-entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1
- 34371 third-party-advisory
- 34031 vdb-entry
- solaris-nfsv4-hsfs-dos(49133) vdb-entry
- 34193 third-party-advisory