Sun Solaris XDMCP Unspecified Denial Of Service Vulnerability
BID:10911
Info
Sun Solaris XDMCP Unspecified Denial Of Service Vulnerability
| Bugtraq ID: | 10911 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 10 2004 12:00AM |
| Updated: | Aug 10 2004 12:00AM |
| Credit: | This vulnerability was disclosed by the vendor. |
| Vulnerable: |
Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 |
| Not Vulnerable: | |
Discussion
Sun Solaris XDMCP Unspecified Denial Of Service Vulnerability
Sun Solaris xdm(1) daemon is reported prone to an unspecified denial of service vulnerability handling malformed XDMCP UDP packets.
UDP packets to port 177 of affected computers running a vulnerable instance of xdm(1) are reportedly capable of crashing xdm(1). The cause of this crash is unspecified. IP based access controls for xdm(1) are reportedly unable to block attackers from exploiting this vulnerability.
This BID will be updated as further information is disclosed.
Solaris 7, 8, and 9 for both SPARC, and x86 platforms are reported vulnerable.
Sun Solaris xdm(1) daemon is reported prone to an unspecified denial of service vulnerability handling malformed XDMCP UDP packets.
UDP packets to port 177 of affected computers running a vulnerable instance of xdm(1) are reportedly capable of crashing xdm(1). The cause of this crash is unspecified. IP based access controls for xdm(1) are reportedly unable to block attackers from exploiting this vulnerability.
This BID will be updated as further information is disclosed.
Solaris 7, 8, and 9 for both SPARC, and x86 platforms are reported vulnerable.
Exploit / POC
Sun Solaris XDMCP Unspecified Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Solaris XDMCP Unspecified Denial Of Service Vulnerability
Solution:
Sun has released an updated alert (57619) and patches addressing this issue for Solaris 8 and 9. Solaris 7 does not have a fix.
Sun Solaris 9_x86
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 9
Solution:
Sun has released an updated alert (57619) and patches addressing this issue for Solaris 8 and 9. Solaris 7 does not have a fix.
Sun Solaris 9_x86
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 9
References
Sun Solaris XDMCP Unspecified Denial Of Service Vulnerability
References:
References:
- Solaris[tm] CDE (Common Desktop Environment) (Sun Microsystems)
- Solaris[tm] Product Line (Sun Microsystems)
- Sun Alert ID: 57619 (Sun Microsystems)