Sun Solaris KSSL Memory Buffer Denial of Service Vulnerability

Bugtraq ID:	24686
Class:	Unknown
CVE:	CVE-2007-3470
Remote:	Yes
Local:	No
Published:	Jun 27 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Avaya Interactive Response 1.3 Avaya Interactive Response 1.2.1 Avaya Interactive Response 2.0 Avaya Interactive Response Avaya CMS Supervisor 0 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 10.0 Avaya CMS Server 9.0 Avaya CMS Server 8.0 Avaya CMS Server 14.0 Avaya CMS Server 13.1 Avaya Call Management System 0
Not Vulnerable:

Sun Solaris KSSL Memory Buffer Denial of Service Vulnerability

Sun Solaris is prone to a denial-of-service vulnerability.

An unprivileged local or remote attacker may exploit this issue to cause a system panic, resulting in denial-of-service conditions.

Solaris 10 SPARC and x86 are affected by this issue.

Sun Solaris KSSL Memory Buffer Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris KSSL Memory Buffer Denial of Service Vulnerability

Solution:
Sun has released an advisory and fixes to address this issue. Please see the references for more information.

Sun Solaris KSSL Memory Buffer Denial of Service Vulnerability

References:

• Sun Solaris Home Page (Sun Microsystems)
  
• Avaya ASA-2007-312: Security Vulnerabilities in the KSSL Kernel Module May Lead (Avaya)
  
• Security Vulnerabilities in the KSSL Kernel Module May Lead to a System Panic (Sun Microsystems)