Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability

Bugtraq ID:	24466
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-3223
Remote:	Yes
Local:	No
Published:	Jun 13 2007 12:00AM
Updated:	Jun 28 2007 03:18AM
Credit:	Andrzej Dereszowski is credited with the discovery of this vulnerability.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability

Sun Solaris is prone to a denial-of-service vulnerability because the operating system fails to handle exceptional conditions.

An attacker can exploit this issue to cause the affected kernel to panic, resulting in a denial-of-service condition.

This issue affects the Solaris 10 operating system.

Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory to address this issue. Please see the references for more information.

Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability

References:

• ASA-2007-271 - Security Vulnerability in Solaris 10 NFS XDR Handling May Allow a (Avaya)
  
• Solaris Homepage (Sun Microsystems)
  
• Sun Alert ID 102965: A Security Vulnerability in Solaris 10 NFS XDR Handling Ma (Sun Microsystems)