• info
• discussion
• exploit
• solution
• references

Sun Solaris modload() Unauthorized Kernel Module Loading Vulnerability

Solution:
Sun has released patches to address this issue on Solaris 7, 8 and 9 for SPARC and x86 platforms. It should be noted that Solaris 2.6 will not be evaluated by the vendor for the presence of the vulnerability and therefore no fixes will be issued for this version.


Sun Solaris 7.0_x86

• Sun 106542-29
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=29

Sun Solaris 9_x86

• Sun 112234-11
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112234&rev=11

Sun Solaris 7.0

• Sun 106541-29
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=29

Sun Solaris 8_x86

• Sun 108529-27
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108529&rev=27

Sun Solaris 8_sparc

• Sun 108528-27
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108528&rev=27

Sun Solaris 9

• Sun 112233-11
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112233&rev=11