Sun Solaris IP Implementation Remote Denial of Service Vulnerability

Bugtraq ID:	23468
Class:	Input Validation Error
CVE:	CVE-2007-2045
Remote:	Yes
Local:	No
Published:	Apr 12 2007 12:00AM
Updated:	Sep 19 2007 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Avaya Interactive Response 1.3 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 9.0 Avaya CMS Server 14.0 Avaya CMS Server 13.1
Not Vulnerable:

Sun Solaris IP Implementation Remote Denial of Service Vulnerability

Sun Solaris is prone to a local and remote denial-of-service vulnerability because the software fails to handle exceptional conditions.

An attacker can exploit this issue to exhaust CPU resources and cause a denial-of-service condition against network services provided by the system or local services.

This issue affects Solaris 8 and Solaris 9.

Sun Solaris IP Implementation Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sun Solaris IP Implementation Remote Denial of Service Vulnerability

Solution:
Sun has released patches to address this issue.


Sun Solaris 9

• Sun 114344-29
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114344-29-1

Sun Solaris 9_x86

• Sun 119435-18
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119435-18-1

Sun Solaris IP Implementation Remote Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• ASA-2007-165 - Security Vulnerability in the IP Implementation for Solaris 8 and (Avaya)
  
• Sun Alert ID: 102866 Security Vulnerability in the IP Implementation for Solaris (Sun Microsystems)
  
• Sun Alert ID: 103023 Certain Solaris 8 and Solaris 9 Security Patches May Cause (Sun)