Sun Solaris IPv4 Forwarding Denial of Service Vulnerability

Bugtraq ID:	32861
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-5661
Remote:	Yes
Local:	No
Published:	Dec 15 2008 12:00AM
Updated:	Dec 29 2008 04:01PM
Credit:	Sun
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0
Not Vulnerable:	Sun OpenSolaris build snv_83

Sun Solaris IPv4 Forwarding Denial of Service Vulnerability

Sun Solaris is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to panic the system, denying service to legitimate users.

The following versions are affected:

Solaris 10 with patch 120011-14(SPARC) or 120012-14 (x86)
OpenSolaris based on builds snv_47 through snv_82

Sun Solaris IPv4 Forwarding Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Sun Solaris IPv4 Forwarding Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

Sun Solaris IPv4 Forwarding Denial of Service Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• A Security Vulnerability in IPv4 Forwarding may Allow a Remote User to Panic the (Sun)
  
• ASA-2008-519 - A Security Vulnerability in IPv4 Forwarding may Allow a Remote Us (Avaya)