Sun Solaris TCP Subsystem Remote Denial of Service Vulnerability

Bugtraq ID:	22550
Class:	Race Condition Error
CVE:	CVE-2007-0914
Remote:	Yes
Local:	No
Published:	Feb 13 2007 12:00AM
Updated:	Feb 22 2007 03:46PM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris TCP Subsystem Remote Denial of Service Vulnerability

Sun Solaris is prone to a remote denial-of-service vulnerability.

A successful attack can trigger a crash in the operating system, leading to a denial-of-service condition for legitimate users.

Sun Solaris TCP Subsystem Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sun Solaris TCP Subsystem Remote Denial of Service Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue. Please see the references for more information.


Sun Solaris 10.0_x86

• Sun 119999-01 (Sun)
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=119999-01&method=h

Sun Solaris TCP Subsystem Remote Denial of Service Vulnerability

References:

• Sun Solaris Home Page (Sun Microsystems)
  
• ASA-2007-069 A Security Vulnerability in the TCP Implementation of Solaris 10 Sy (Avaya)
  
• Sun Alert Notification 102796 (Sun)