Sun Solaris ip(7P) Kernel Module IP-in-IP Packet Handling Local Denial Of Service Vulnerability
BID:33504
Info
Sun Solaris ip(7P) Kernel Module IP-in-IP Packet Handling Local Denial Of Service Vulnerability
| Bugtraq ID: | 33504 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 28 2009 12:00AM |
| Updated: | Feb 09 2009 01:58PM |
| Credit: | Evgeny Sonyagin |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 10_x86 Sun Solaris 10 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 15.0 Avaya CMS Server 14.1 Avaya CMS Server 14.0 Avaya CMS Server 13.1 |
| Not Vulnerable: |
Sun OpenSolaris build snv_86 |
Discussion
Sun Solaris ip(7P) Kernel Module IP-in-IP Packet Handling Local Denial Of Service Vulnerability
Sun Solaris 'ip(7P)' kernel module is prone to an unspecified local denial-of-service vulnerability.
Local attackers may exploit this issue to panic a system, denying service to legitimate users.
NOTE: Although Sun reported this issue as a local vulnerability, remote attackers could possibly exploit the issue as well. Symantec has not confirmed this possibility.
Sun Solaris 'ip(7P)' kernel module is prone to an unspecified local denial-of-service vulnerability.
Local attackers may exploit this issue to panic a system, denying service to legitimate users.
NOTE: Although Sun reported this issue as a local vulnerability, remote attackers could possibly exploit the issue as well. Symantec has not confirmed this possibility.
Exploit / POC
Sun Solaris ip(7P) Kernel Module IP-in-IP Packet Handling Local Denial Of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Solaris ip(7P) Kernel Module IP-in-IP Packet Handling Local Denial Of Service Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Sun Solaris 9_x86
Sun Solaris 10_x86
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Sun Solaris 9_x86
Sun Solaris 10_x86
References
Sun Solaris ip(7P) Kernel Module IP-in-IP Packet Handling Local Denial Of Service Vulnerability
References:
References: