Sun Fire Servers IP Spoofing Security Bypass Vulnerability
BID:32805
Info
Sun Fire Servers IP Spoofing Security Bypass Vulnerability
| Bugtraq ID: | 32805 |
| Class: | Design Error |
| CVE: |
CVE-2008-5685 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 12 2008 12:00AM |
| Updated: | Dec 31 2008 04:31PM |
| Credit: | Sun Microsystems |
| Vulnerable: |
Sun Sun Fire V1280 0 Sun Sun Fire E6900 0 Sun Sun Fire E4900 0 Sun Sun Fire E2900 0 Sun Sun Fire 6800 Sun Sun Fire 4810 Sun Sun Fire 4800 Sun Sun Fire 3800 Sun Netra 1290 0 Sun Netra 1280 |
| Not Vulnerable: | |
Discussion
Sun Fire Servers IP Spoofing Security Bypass Vulnerability
Sun Fire Servers are prone to a security-bypass vulnerability.
Attackers can exploit this vulnerability to gain unauthorized access to the System Controller (SC) and possibly the host operating system. This may allow attackers to perform actions that will result in denial-of-service conditions and possibly other attacks.
Sun Fire Servers are prone to a security-bypass vulnerability.
Attackers can exploit this vulnerability to gain unauthorized access to the System Controller (SC) and possibly the host operating system. This may allow attackers to perform actions that will result in denial-of-service conditions and possibly other attacks.
Exploit / POC
Sun Fire Servers IP Spoofing Security Bypass Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
Sun Fire Servers IP Spoofing Security Bypass Vulnerability
Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more information.
Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more information.
References
Sun Fire Servers IP Spoofing Security Bypass Vulnerability
References:
References: