Sun 在10月16日发布了一个安全公告(47815)：本地或远程用户可对 Solaris 的 NFS 进行拒绝服务攻击。但Sun并没有提供有关的详细技术细节。 本地或远程攻击者利用此缺陷未经身份验证，便可通过一个客户端应用程序将服务器的"lockd"守护进程杀死，而一旦"lockd"进程被杀死，NFS的正常操作将无法进行。为验证是否遭到恶意用户成功攻击，用户可使用指令"ps -ef"查看"lockd"是否在运行。如果"lockd"进程在debug模式中被启动，在文件"/var/adm/messages"中将可看到类似如下消息： Oct 8 13:39:41 flower unix: svc_tli_kcreate returned 134 NFS client operations that require file locking will hang. 受影响系统： SPARC Solaris 2.5.1 Solaris 2.6 without patch 105181-33 Solaris 7 without patch 106541-23 and patch 109744-02 Solaris 8 without patch 109783-02 and patch 111321-03 Solaris 9 without patch 113278-01 and patch 113279-01 Intel Solaris 2.5.1 Solaris 2.6 without patch 105182-33 Solaris 7 without patch 106542-23 and patch 109745-02 Solaris 8 without patch 109784-02 and patch 111322-03 攻击方法： 暂无有效攻击代码 解决方案： 下载并安装补丁： SPARC Solaris 2.6 with patch 105181-33 Solaris 7 with both patch 106541-23 or later and patch 109744-02 or later Solaris 8 with both patch 109783-02 or later and patch 111321-03 or later Solaris 9 with both patch 113278-01 or later and patch 113279-01 or later Intel Solaris 2.6 with patch 105182-33 or later Solaris 7 with both patch 106542-23 or later and patch 109745-02 or later Solaris 8 with both patch 109784-02 or later and patch 111322-03 or later 附加信息： Sun Alert ID: 47815 BugIDs: 4492876