Solaris rpc.ttdbserver Denial of Service Vulnerability

Bugtraq ID:	811
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 19 1999 12:00AM
Updated:	Nov 19 1999 12:00AM
Credit:	Information about this vulnerability was posted to BugTraq by Elias Levy <[email protected]> on Nov 19, 1999.
Vulnerable:	Sun Solaris 7.0_x86 Sun Solaris 7.0
Not Vulnerable:

Solaris rpc.ttdbserver Denial of Service Vulnerability

It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with garbage. You cannot make rpc.ttdbserver execute arbitrary code with this vulnerability. The consequence of this vulnerability being exploited is a denial of service condition (rpc.ttdbserver).

Solaris rpc.ttdbserver Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

• /data/vulnerabilities/exploits/rpc.ttdbserverd.c

Solaris rpc.ttdbserver Denial of Service Vulnerability

Solution:
Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 7.0_x86

• Sun 107894-02
  x86
  

Sun Solaris 7.0

• Sun 107893-02
  sparc
  

Solaris rpc.ttdbserver Denial of Service Vulnerability

References:

• Sun Patches List (Sun Microsystems)