Sun Solaris SCTP Network Flooding Remote Denial of Service Vulnerability
BID:29024
Info
Sun Solaris SCTP Network Flooding Remote Denial of Service Vulnerability
| Bugtraq ID: | 29024 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2008-2090 |
| Remote: | Yes |
| Local: | Yes |
| Published: | May 02 2008 12:00AM |
| Updated: | May 07 2015 05:29PM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10_sparc |
| Not Vulnerable: | |
Discussion
Sun Solaris SCTP Network Flooding Remote Denial of Service Vulnerability
Sun Solaris is prone to a denial-of-service vulnerability that occurs in processing the SCTP Protocol.
A local or remote attacker can exploit this issue to cause the system to hang or to degrade its performance, denying service to legitimate users.
This issue affects the Solaris 10 operating system.
Sun Solaris is prone to a denial-of-service vulnerability that occurs in processing the SCTP Protocol.
A local or remote attacker can exploit this issue to cause the system to hang or to degrade its performance, denying service to legitimate users.
This issue affects the Solaris 10 operating system.
Exploit / POC
Sun Solaris SCTP Network Flooding Remote Denial of Service Vulnerability
To exploit this issue, attackers use readily available network utilities.
To exploit this issue, attackers use readily available network utilities.
Solution / Fix
Sun Solaris SCTP Network Flooding Remote Denial of Service Vulnerability
Solution:
Sun has released patches and an advisory. Please see the references for more information.
Solution:
Sun has released patches and an advisory. Please see the references for more information.
References
Sun Solaris SCTP Network Flooding Remote Denial of Service Vulnerability
References:
References:
- Solaris Homepage (Sun Microsystems)
- Sun Alert ID 236521 (Sun Microsystems)