Sun Solaris DHCP Denial of Service And Remote Code Execution Vulnerabilities
BID:32213
Info
Sun Solaris DHCP Denial of Service And Remote Code Execution Vulnerabilities
| Bugtraq ID: | 32213 |
| Class: | Unknown |
| CVE: |
CVE-2008-5010 CVE-2007-5365 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 07 2008 12:00AM |
| Updated: | Jul 05 2016 10:01PM |
| Credit: | Sun |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 |
| Not Vulnerable: | |
Discussion
Sun Solaris DHCP Denial of Service And Remote Code Execution Vulnerabilities
The DHCP server daemon in Sun Solaris is prone to multiple vulnerabilities.
Attackers can exploit these issues to execute arbitrary code with root privileges or cause the DHCP server daemon to crash. Successful exploits may completely compromise the vulnerable system.
Note that one of the issues is related to the issue described in BID 25984.
These issues affect the following on both x86 and SPARC platforms:
Solaris 8
Solaris 9
Solaris 10
OpenSolaris based on builds snv_01 through snv_102
The DHCP server daemon in Sun Solaris is prone to multiple vulnerabilities.
Attackers can exploit these issues to execute arbitrary code with root privileges or cause the DHCP server daemon to crash. Successful exploits may completely compromise the vulnerable system.
Note that one of the issues is related to the issue described in BID 25984.
These issues affect the following on both x86 and SPARC platforms:
Solaris 8
Solaris 9
Solaris 10
OpenSolaris based on builds snv_01 through snv_102
Exploit / POC
Sun Solaris DHCP Denial of Service And Remote Code Execution Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Solaris DHCP Denial of Service And Remote Code Execution Vulnerabilities
Solution:
The vendor has released an advisory and updates to address these issues. Please see the references for more information.
Solution:
The vendor has released an advisory and updates to address these issues. Please see the references for more information.
References
Sun Solaris DHCP Denial of Service And Remote Code Execution Vulnerabilities
References:
References:
- Sun Solaris Homepage (Sun Microsystems)
- Solution 243806: Security Vulnerabilities in DHCP Handling of DHCP Requests May (Sun)