Sun Solaris 10 Unspecified SCTP Protocol Processing Remote Denial of Service Vulnerability

Bugtraq ID:	29023
Class:	Unknown
CVE:	CVE-2008-2089
Remote:	Yes
Local:	No
Published:	May 02 2008 12:00AM
Updated:	Jun 23 2008 07:01PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun Solaris 10 Nortel Networks Self-Service - CCSS7 0 Nortel Networks Peri Workstation 0 Nortel Networks Peri Application 0 Nortel Networks Media Processing Svr 1000 Rel 3.0
Not Vulnerable:

Sun Solaris 10 Unspecified SCTP Protocol Processing Remote Denial of Service Vulnerability

Sun Solaris is prone to an unspecified denial-of-service vulnerability because of SCTP (Stream Control Transmission Protocol) protocol processing.

An attacker can exploit this issue to cause the affected kernel to panic, resulting in a denial-of-service condition.

This issue affects the Solaris 10 operating system.

Sun Solaris 10 Unspecified SCTP Protocol Processing Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 10 Unspecified SCTP Protocol Processing Remote Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory. Please see the references for more information.

Sun Solaris 10 Unspecified SCTP Protocol Processing Remote Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• Nortel Response to Sun Alert 236521 - Solaris 10 SCTP Potential Vulnerability (Nortel Networks)
  
• Sun Alert 236321: A Security Vulnerability in Solaris 10 Involving the SCTP Prot (Sun Microsystems)