Sun Solaris Netstat and Ifconfig Local Denial of Service Vulnerability

Bugtraq ID:	19493
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 11 2006 12:00AM
Updated:	Jan 30 2007 10:19PM
Credit:	Reported by the vendor.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10
Not Vulnerable:

Sun Solaris Netstat and Ifconfig Local Denial of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

A successful attack can trigger a crash in the application, leading to a denial-of-service condition for legitimate users.

Solaris 10 is affected by this issue.

Sun Solaris Netstat and Ifconfig Local Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Sun Solaris Netstat and Ifconfig Local Denial of Service Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue.


Sun Solaris 10.0_x86

• Sun 118855-33
  http://sunsolve.sun.com/patches/

Sun Solaris Netstat and Ifconfig Local Denial of Service Vulnerability

References:

• On Solaris 10 a System Panic Due to a Race Condition May OccurWhen SNMP Queries (Sun)
  
• Sun Alert ID: 102569 (Sun)