Sun Solaris ICMP Unspecified Remote Denial of Service Vulnerability

Bugtraq ID:	22323
Class:	Unknown
CVE:	CVE-2007-0634
Remote:	Yes
Local:	No
Published:	Jan 30 2007 12:00AM
Updated:	May 12 2015 07:34PM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Nortel Networks Passport Multiservice Data Manager (MDM) Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris ICMP Unspecified Remote Denial of Service Vulnerability

Sun Solaris is prone to a remote denial-of-service vulnerability.

A successful attack can trigger a crash in the operating system, leading to a denial-of-service condition for legitimate users.

Solaris 10 is affected by this issue.

Sun Solaris ICMP Unspecified Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/22323-icmp.c

Sun Solaris ICMP Unspecified Remote Denial of Service Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue. Please see the references for more information.

Sun Solaris ICMP Unspecified Remote Denial of Service Vulnerability

References:

• Sun Solaris Home Page (Sun Microsystems)
  
• A Security Vulnerability in Solaris 10 ICMP Handling May Allow a SystemPanic and (Sun)
  
• ASA-2007-049 - A Security Vulnerability in Solaris 10 ICMP Handling May Allow a (Avaya)
  
• Sun Solaris fails to properly process ICMP packets (US-CERT)