Sun Solaris in.named Remote Denial of Service Vulnerability

Bugtraq ID:	11118
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 06 2004 12:00AM
Updated:	Sep 06 2004 12:00AM
Credit:	Announced by Sun.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:	Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 7.0_x86 Sun Solaris 7.0

Sun Solaris in.named Remote Denial of Service Vulnerability

Sun has reported that a remotely exploitable denial of service affects the Solaris 8 version of in.named, the primary DNS daemon. According to the report, a remote attacker can crash a running in.named process by sending it dynamic updates. Sun has stated that the remote attacker must be "privileged".

Sun had made patches available. It is not known if this vulnerability is present in the ISC BIND source tree. If this were so, many other systems would be affected.

Sun Solaris in.named Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris in.named Remote Denial of Service Vulnerability

Solution:
Sun has made fixes available:


Sun Solaris 8_x86

• Sun 109327-16
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-109327-16-1

Sun Solaris 8_sparc

• Sun 109326-16
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-109326-16-1

Sun Solaris in.named Remote Denial of Service Vulnerability

References:

• The in.named(1M) Process May Die Upon Receiving Dynamic Updates (Sun)