Solaris in.ftpd Denial of Service Vulnerability

Bugtraq ID:	709
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 10 1998 12:00AM
Updated:	Jun 10 1998 12:00AM
Credit:	This vulnerability was published by Sun Microsystems as Security Bulletin 00171 on June 10, 1998.
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4_x86 Sun Solaris 2.4 Sun Solaris 2.3
Not Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0

Solaris in.ftpd Denial of Service Vulnerability

Under certain version of Solaris it is possible to mount a denial of service attack against the FTP daemon rendering the service unusable. The Sun advisory on this was intentionally vague. No other information is available.

Solaris in.ftpd Denial of Service Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.6

• Sun 106301-01
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-106301-01-1

Sun Solaris 2.4_x86

• Sun 101946-55
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-101946-55-1

Sun Solaris 2.5

• Sun 103577-10
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103577-10-1

Sun Solaris 2.3

• Sun 104938-02
  sparc
  

Sun Solaris 2.5_x86

• Sun 103578-10
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103578-10-1

Sun Solaris 2.4

• Sun 101945-62
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-101945-62-1

Sun Solaris 2.5.1 _x86

• Sun 103604-11
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103604-11-1

Sun Solaris 2.5.1

• Sun 103603-11
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-103603-11-1

Solaris in.ftpd Denial of Service Vulnerability

References:

• Sun Patch Access Page (Sun Microsystems)
  
• Sun Patches List (Sun Microsystems)
  
• Sunsolve Online(tm) (Sun Microsystems)