COMMAND
ICEBP
SYSTEMS AFFECTED
Solaris x86 (tested on 2.5)
PROBLEM
Solar Designer posted following. There is a minor Solaris x86
bug tested on Solaris 2.5. When a program executes the originally
undocumented ICEBP instruction, the kernel reports an 'Unexpected
INT 1', and the program continues running. With default syslogd
configuration, this allows flooding the console, and no
information about which process is doing this is reported.
Here's the exploit (put in a .s file):
.globl main
main:
.byte 0xf1
jmp main
SOLUTION
Nothing yet.