Sun Solaris Print Service (in.lpd(1M)) Remote Denial of Service Vulnerability

Bugtraq ID:	36148
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2009 12:00AM
Updated:	Aug 26 2009 03:42PM
Credit:	Sun
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc
Not Vulnerable:

Sun Solaris Print Service (in.lpd(1M)) Remote Denial of Service Vulnerability

Sun Solaris is prone to a remote denial-of-service vulnerability because of an error in the print service (in.lpd(1M)).

Exploiting this issue allows attackers to cause the vulnerable system to become unresponsive, effectively denying service to legitimate users.

This issue affects Solaris 8 and 9.

Sun Solaris Print Service (in.lpd(1M)) Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris Print Service (in.lpd(1M)) Remote Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for details.


Sun Solaris 9_x86

• Sun 114980-09
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114980-09-1

Sun Solaris 8_x86

• Sun 109321-23
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109321-23-1

Sun Solaris 8_sparc

• Sun 109320-23
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -109320-23-1

Sun Solaris Print Service (in.lpd(1M)) Remote Denial of Service Vulnerability

References:

• Sun Homepage (Sun Microsystems )
  
• 264608 Solaris Print Service (Sun)