Sun Solaris TCP Loopback/Fusion Code Local Denial of Service Vulnerability

Bugtraq ID:	24685
Class:	Unknown
CVE:	CVE-2007-3469
Remote:	No
Local:	Yes
Published:	Jun 27 2007 12:00AM
Updated:	Jul 26 2007 10:15PM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Solaris 10.0_x86 Sun Solaris 10 Avaya Interactive Response 1.3 Avaya Interactive Response 1.2.1 Avaya Interactive Response 2.0 Avaya Interactive Response
Not Vulnerable:

Sun Solaris TCP Loopback/Fusion Code Local Denial of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

An unprivileged local attacker may exploit this issue to exhaust all available kernel memory. This will cause the system to hang, resulting in denial-of-service conditions.

Solaris 10 SPARC and x86 are affected by this issue.

Sun Solaris TCP Loopback/Fusion Code Local Denial of Service Vulnerability

To exploit this issue, an unprivileged local attacker must attack the loopback device.

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sun Solaris TCP Loopback/Fusion Code Local Denial of Service Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue. Please see the references for more information.


Sun Solaris 10.0_x86

• Sun Solaris 10 x86 patch 125101-10
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -125101-10-1

Sun Solaris TCP Loopback/Fusion Code Local Denial of Service Vulnerability

References:

• Sun Solaris Home Page (Sun Microsystems)
  
• A Security Vulnerability in the TCP Loopback/Fusion Code May Lead to a System Ha (Sun Microsystems)
  
• ASA-2007-306 A Security Vulnerability in the TCP Loopback/Fusion Code May Lead t (Avaya)