Solaris passwd DoS Vulnerability

Bugtraq ID:	174
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Unknown
Published:	Dec 17 1998 12:00AM
Updated:	Dec 17 1998 12:00AM
Credit:	This vulnerability was public via Sun Microsystems Notice 00182 on December 17, 1998. This notice is attached in the 'Credit' section of this vulnerability entry.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:

Solaris passwd DoS Vulnerability

A denial of service (DoS) condition has been found in the passwd utility under certain versions of Solaris. This entry is rather vague due to lack of available information other than that which was provided by the vendor.

Solaris passwd DoS Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solaris passwd DoS Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.6

• Sun 106271-04
  sparc
  

Sun Solaris 2.4_x86

• Sun 101946-53
  x86
  

Sun Solaris 2.6_x86

• Sun 106272-04
  x86
  

Sun Solaris 2.5

• Sun 103178-09
  sparc
  

Sun Solaris 2.3

• Sun 101318-91
  sparc
  

Sun Solaris 2.5_x86

• Sun 103179-09
  x86
  

Sun Solaris 2.4

• Sun 101945-60
  sparc
  

Sun Solaris 2.5.1 _x86

• Sun 104434-08
  x86
  

Sun Solaris 2.5.1

• Sun 104433-09
  sparc
  

Solaris passwd DoS Vulnerability

References:

• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)