CVE-2004-1393

Vulnerability

An unspecified vulnerability exists in the tcsetattr() library function on Sun Solaris for SPARC systems, affecting versions 2.6, 7, and 8 [1]. The function is used to set terminal parameters, and a flaw in its handling allows a local user to trigger a system hang [1].

Exploitation

An unprivileged local user with access to the affected Solaris system can trigger the vulnerability by invoking tcsetattr() in a specific unspecified manner [1]. No authentication beyond local system access is required, and no user interaction beyond executing the attack is needed.

Impact

Successful exploitation causes the entire system to hang, resulting in a denial-of-service condition [1]. Functionality can only be restored by rebooting the system, leading to potential disruption of services and loss of availability [1].

Mitigation

Sun Microsystems released patches to address the vulnerability; affected systems should apply the appropriate patch for their Solaris version as indicated in the Sun Security Advisory [1]. Reboot is required after patching to restore normal operation.