Sun Solstice X.25 '/dev/xty' Local Denial Of Service Vulnerability

Bugtraq ID:	32215
Class:	Access Validation Error
CVE:	CVE-2008-5009
Remote:	No
Local:	Yes
Published:	Nov 07 2008 12:00AM
Updated:	Apr 16 2015 05:51PM
Credit:	Sun
Vulnerable:	Sun Solstice X.25 9.2 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Sun Solstice X.25 '/dev/xty' Local Denial Of Service Vulnerability

Sun Solstice X.25 is prone to a local denial-of-service vulnerability.

Attackers may exploit this issue to panic a system with multiple CPUs.

This issue affects Solstice X.25 9.2 on both x86 and SPARC platforms.

Sun Solstice X.25 '/dev/xty' Local Denial Of Service Vulnerability

Attackers can exploit this issue using readily available tools and standard commands.

Sun Solstice X.25 '/dev/xty' Local Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and fixes. Please the references for more information.

Sun Solstice X.25 '/dev/xty' Local Denial Of Service Vulnerability

References:

• Sun Solstice X.25 Homepage (Sun)
  
• Solution 243106: Security Vulnerability in Solstice X.25 May Allow Denial of Ser (Sun)