Sun Solaris TCP SYN Flooding Remote Denial of Service Vulnerability

Bugtraq ID:	29089
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-2121
Remote:	Yes
Local:	No
Published:	May 07 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri CTX 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service MPS 100 0 Nortel Networks Self-Service Media Processing Server 0 Nortel Networks Self-Service - CCSS7 0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 14.0 Avaya CMS Server 13.1
Not Vulnerable:

Sun Solaris TCP SYN Flooding Remote Denial of Service Vulnerability

Sun Solaris is prone to a remote denial-of-service vulnerability that occurs because of its TCP implementation.

A remote attacker can exploit this issue to cause the system to hang or to degrade its performance, denying service to legitimate users.

Sun Solaris TCP SYN Flooding Remote Denial of Service Vulnerability

To exploit this issue, attackers use readily available network utilities.

Sun Solaris TCP SYN Flooding Remote Denial of Service Vulnerability

Solution:
Sun has released patches and an advisory. Please see the references for more information.


Sun Solaris 10_sparc

• Sun 119998-01
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-119998-01-1

Sun Solaris 9_x86

• Sun 119435-23
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-119435-23-1

Sun Solaris 10_x86

• Sun 119999-01
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-119999-01-1

Sun Solaris 8_x86

• Sun 116966-32
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-116966-32-1

Sun Solaris 8_sparc

• Sun 116965-33
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-33-1

Sun Solaris 9_sparc

• Sun 114344-35
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-114344-35-1

Sun Solaris TCP SYN Flooding Remote Denial of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• ASA-2008-206: Security Vulnerability in the TCP Implementation of Solaris System (Avaya)
  
• Nortel Response to Sun Alert 200864 - Solaris DoS Under a TCP "SYN Flood" Attack (Nortel)
  
• Sun Alert ID 200864 (Sun Microsystems)