Sun Solaris OpenSSL 'PKCS#11' Engine Remote Denial Of Service Vulnerability

Bugtraq ID:	32671
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 03 2008 12:00AM
Updated:	Jan 23 2009 11:12PM
Credit:	Sun
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service - CCSS7 0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0
Not Vulnerable:

Sun Solaris OpenSSL 'PKCS#11' Engine Remote Denial Of Service Vulnerability

Sun Solaris OpenSSL 'PKCS#11' engine is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions.

This issue affects the OpenSSL 'PKCS#11' engine implementation that ships with Solaris 10.

Sun Solaris OpenSSL 'PKCS#11' Engine Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris OpenSSL 'PKCS#11' Engine Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Sun Solaris OpenSSL 'PKCS#11' Engine Remote Denial Of Service Vulnerability

References:

• 246846 - A Security Vulnerability in the OpenSSL PKCS#11 Engine May Result in De (Sun)
  
• Nortel Response to Sun Alert 246846 - Solaris 10 OpenSSL PKCS#11 Engine May Resu (Sun Microsystems)
  
• Solaris Homepage (Sun Microsystems)
  
• ASA-2008-505 - A Security Vulnerability in the OpenSSL PKCS#11 Engine May Result (Avaya)