Sun Solaris TCP/IP Kernel Memory Corruption Denial of Service Vulnerability

Bugtraq ID:	23218
Class:	Race Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 30 2007 12:00AM
Updated:	Mar 30 2007 09:53PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10.0
Not Vulnerable:

Sun Solaris TCP/IP Kernel Memory Corruption Denial of Service Vulnerability

Sun Solaris is prone to a vulnerability that can result in a kernel panic.

Very few details are known regarding this issue. This BID will be updated when more information becomes available.

A successful attack will result in denial-of-service conditions.

Sun Solaris TCP/IP Kernel Memory Corruption Denial of Service Vulnerability

An attacker can exploit this issue by using standard network utilities.

Sun Solaris TCP/IP Kernel Memory Corruption Denial of Service Vulnerability

Solution:
The vendor has released a patch to address this issue. Please see the references for more information.


Sun Solaris 10.0

• Sun 125100-02
  http://sunsolve.sun.com/private-cgi/pdownload.pl?target=125100-02&meth od=h

Sun Solaris 10.0_x86

• Sun 125101-02
  http://sunsolve.sun.com/private-cgi/pdownload.pl?target=125101-02&meth od=h

Sun Solaris TCP/IP Kernel Memory Corruption Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• On Solaris 10 Kernel Memory Corruption May be Seen in TCP/IP Under High Stress R (Sun)