A remotely exploitable denial-of-service vulnerability exists in the Solaris lockd(1M) daemon. Exploitation of this vulnerability may kill the lockd process.
Sun Microsystems describes the lockd(1M) daemon as follows:
The lockd utility is part of the NFS lock manager, which supports record locking operations on NFS files. The lock manager provides two functions:
A remote attacker can terminate the lockd(1M) daemon.
Apply a patch. For more information about the patches, please see Sun Alert Notification 47815.
The CERT/CC thanks Phil Moses of UC San Diego for reporting this vulnerability to us.
This document was written by Ian A Finlay.
|Date First Published:||2003-02-05|
|Date Last Updated:||2003-02-06 18:00 UTC|