CVE-2009-2644 Information

Description

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121 when extended file attributes are used allows local users to cause a denial of service (panic) via vectors related to \pathnames for invalid fds.\

Reference

http://secunia.com/advisories/36042 http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1 http://www.securityfocus.com/bid/35835 http://www.vupen.com/english/advisories/2009/2022 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A6168