Sun Solstice X.25 Denial of Service Vulnerability

Bugtraq ID:	8881
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 24 2003 12:00AM
Updated:	Oct 24 2003 12:00AM
Credit:	The disclosure of this issue has been credited to the vendor.
Vulnerable:	Sun Solstice X.25 9.2 Sun Solstice X.25 9.1
Not Vulnerable:

Sun Solstice X.25 Denial of Service Vulnerability

It has been reported that Sun Solstice X.25 may be prone to a denial of service vulnerability due to improper handling of exceptional conditions by snmpx25d daemon. The issue presents itself as a remote attacker sends certain SNMP requests to the software. These requests may cause the software to consume an excessive amount of CPU cycles leading to a crash or hang.

Successful exploitation of this issue may allow an attacker to cause the software to act in an unstable manner leading to a crash or hang.

This issue is related to previously released BIDs 4088 and 4089.

Sun Solstice X.25 version 9.2 and prior have been reported to be prone to this issue, however other versions may be vulnerable as well.

Sun Solstice X.25 Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solstice X.25 Denial of Service Vulnerability

Solution:
Sun has released an advisory Sun(sm) Alert Notification 57404. Please see references for more information.