Sun Solaris Self Encapsulated IP Packets Remote Denial of Service Vulnerability

Bugtraq ID:	28732
Class:	Unknown
CVE:	CVE-2008-1779
Remote:	Yes
Local:	No
Published:	Apr 03 2008 12:00AM
Updated:	May 07 2015 05:30PM
Credit:	Sun Microsystems
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 13.1
Not Vulnerable:

Sun Solaris Self Encapsulated IP Packets Remote Denial of Service Vulnerability

Sun Solaris is prone to a denial-of-service vulnerability because it fails to handle specially crafted network data.

A remote attacker can exploit this issue to cause the affected server to crash, resulting in a denial-of-service condition.

This issue affects Solaris 8, 9, and 10 for SPARC and x86 platforms.

Sun Solaris Self Encapsulated IP Packets Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris Self Encapsulated IP Packets Remote Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

Sun Solaris Self Encapsulated IP Packets Remote Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• ASA-2008-173 A Security Vulnerability in the Handling of Self Encapsulated IP Pa (Avaya)
  
• Solution 235901: A Security Vulnerability in the Handling of Self Encapsulated I (Sun Microsystems)