Sun Internet Protocol Implementation Routing Table Bypass Vulnerability

Bugtraq ID:	19108
Class:	Unknown
CVE:	CVE-2006-3825
Remote:	No
Local:	Yes
Published:	Jul 21 2006 12:00AM
Updated:	Jun 27 2007 03:48AM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10.0 Avaya Interactive Response
Not Vulnerable:

Sun Internet Protocol Implementation Routing Table Bypass Vulnerability

Sun's Internet Protocol implementation is prone to a routing-table-bypass vulnerability. This vulnerability occurs because the kernel fails to secure that network traffic is routed only to addresses configured in the system's routing table.

A successful exploit may allow an attacker to bypass the system's routing-table configuration to redirect traffic to unauthorized addresses. This may allow an attacker to access unauthorized hosts and services by bypassing firewalls.

Sun Internet Protocol Implementation Routing Table Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Sun Internet Protocol Implementation Routing Table Bypass Vulnerability

Solution:
The vendor has released patches 118833-18 and 118855-15 to address this issue. Please see the references for more information.

Sun Internet Protocol Implementation Routing Table Bypass Vulnerability

References:

• Avaya Security Advisory ASA-2006-181 (Avaya)
  
• Sun Microsystems Security Advisory 102509 (Sun Microsystems)