Sun Solaris 10 Malformed IPV6 Packets Denial of Service Vulnerability

Bugtraq ID:	20195
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 25 2006 12:00AM
Updated:	Sep 26 2006 08:31PM
Credit:	Reported by the vendor.
Vulnerable:	Sun Solaris 10.0_x86
Not Vulnerable:

Sun Solaris 10 Malformed IPV6 Packets Denial of Service Vulnerability

Sun Solaris 10 is prone to a denial-of-service vulnerability. This issue arises on systems running Solaris 10 x64 without patch 118855-16.

The vendor has reported that local or remote users on affected computers may trigger a denial-of-service condition through malformed IPV6 network packets.

A successful exploit may allow attackers to crash the operating system, effectively denying
service.

Sun Solaris 10 Malformed IPV6 Packets Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Sun Solaris 10 Malformed IPV6 Packets Denial of Service Vulnerability

Solution:
Sun has released patch 118855-16 to address this issue. Please see the vendor references for information on obtaining a fix.

Sun Solaris 10 Malformed IPV6 Packets Denial of Service Vulnerability

References:

• Sun Alert ID: 102568 (Sun)
  
• Sun Solaris Home Page (Sun Microsystems)