Sun Solaris '3SOCKET' Local Denial Of Service Vulnerability

Bugtraq ID:	32296
Class:	Access Validation Error
CVE:	CVE-2008-5111
Remote:	No
Local:	Yes
Published:	Nov 13 2008 12:00AM
Updated:	May 07 2015 05:21PM
Credit:	Sun
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris '3SOCKET' Local Denial Of Service Vulnerability

Sun Solaris is prone to a local denial-of-service vulnerability.

Attackers may exploit this issue to panic a system, denying service to legitimate users.

This issue affects the following:

Solaris 10
OpenSolaris based on builds snv_57 to snv_91

Sun Solaris '3SOCKET' Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris '3SOCKET' Local Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and fixes. Please the references for more information.

Sun Solaris '3SOCKET' Local Denial Of Service Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• ASA-2008-447 A Security Vulnerability in the Solaris Socket(3SOCKET) Function Ma (Avaya)
  
• Solution 242806: A Security Vulnerability in the Solaris Socket(3SOCKET) Functio (Sun)