Sun Solaris 10 'ipsecah(7P)' Kernel Module Local Denial of Service Vulnerability

Bugtraq ID:	28112
Class:	Unknown
CVE:	CVE-2008-1205
Remote:	No
Local:	Yes
Published:	Feb 28 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solaris 10 'ipsecah(7P)' Kernel Module Local Denial of Service Vulnerability

Sun Solaris is prone to a denial-of-service vulnerability.

A local unprivileged attacker can exploit this issue to cause a system crash on an affected computer, resulting in denial-of-service conditions.

This issue affects Solaris 10 for SPARC and x86 architectures.

Sun Solaris 10 'ipsecah(7P)' Kernel Module Local Denial of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 10 'ipsecah(7P)' Kernel Module Local Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory to address this issue. Please see the references for more information.


Sun Solaris 10_x86

• Sun 127112-09
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -127112-09-1

Sun Solaris 10 'ipsecah(7P)' Kernel Module Local Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• 233761 - Security Vulnerability in the ipsecah(7P) Kernel Module May Lead to Sys (Sun)