Sun Solaris SSH IKE Information Disclosure Vulnerability

Bugtraq ID:	13750
Class:	Unknown
CVE:
Remote:	Yes
Local:	Unknown
Published:	May 24 2005 12:00AM
Updated:	May 24 2005 12:00AM
Credit:	This issue was announced by Sun.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9
Not Vulnerable:

Sun Solaris SSH IKE Information Disclosure Vulnerability

Sun Solaris IKE is affected by an information disclosure vulnerability.

Few details are available about this issue, however, it was reported that the SSH IKE code may leak hostent structures. Information gathered through the exploitation of this issue may lead to other attacks against the affected computer.

Sun Solaris 9 is affected by this vulnerability.

Sun Solaris SSH IKE Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris SSH IKE Information Disclosure Vulnerability

Solution:
Sun has released patches to address this issue.


Sun Solaris 9_x86

• Sun 114136-01
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114136&rev=01

Sun Solaris 9

• Sun 114125-01
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114125-01&method=h

Sun Solaris SSH IKE Information Disclosure Vulnerability

References:

• 114125-01 - SunOS 5.9: IKE config.sample patch (Sun)
  
• 114436-01 - SunOS 5.9_x86: ike hardware - config.sample patch (Sun)