Sun Solaris ip(7P) Kernel Module Minor Number Allocation Local Denial Of Service Vulnerability

Bugtraq ID:	33550
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0480
Remote:	No
Local:	Yes
Published:	Jan 31 2009 12:00AM
Updated:	Apr 16 2009 04:06PM
Credit:	Vendor
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 15.0 Avaya CMS Server 14.1 Avaya CMS Server 14.0 Avaya CMS Server 13.1
Not Vulnerable:	Sun OpenSolaris build snv_82

Sun Solaris ip(7P) Kernel Module Minor Number Allocation Local Denial Of Service Vulnerability

Sun Solaris 'ip(7P)' kernel module is prone to a local denial-of-service vulnerability.

Local attackers may exploit this issue to exhaust certain system resources, denying service to legitimate users.

Sun Solaris ip(7P) Kernel Module Minor Number Allocation Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris ip(7P) Kernel Module Minor Number Allocation Local Denial Of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Sun Solaris 9

• Sun 114344-37
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114344-37-1

Sun Solaris 9_x86

• Sun 119435-25
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119435-25-1

Sun Solaris 10_x86

• Sun 138889-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -138889-01-1

Sun Solaris 8_x86

• Sun 116966-33
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116966-33-1

Sun Solaris 8_sparc

• Sun 116965-34
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116965-34-1

Sun Solaris 10

• Sun 138888-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -138888-01-1

Sun Solaris ip(7P) Kernel Module Minor Number Allocation Local Denial Of Service Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• ASA-2009-042: Security Vulnerability in the Solaris IP(7p) Implementation, Relat (Avaya)
  
• Solution 248026 : Security Vulnerability in the Solaris IP(7p) Implementation (Sun)