There's a bug reported in Solaris kernels' handling of named pipes.  An unchecked function parameter allows an attacker to use up large amounts of memory.

More details about the vulnerability and patch can be found at the following:

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=603
http://blogs.sun.com/security/entry/sun_alert_103061_security_vulnerability
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103061-1