Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability

TITLE: Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability
CLASS: Failure to Handle Exceptional Conditions
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: Jun 13 2007 12:00AM
UPDATE: Jun 14 2007 05:39PM
CREDIT: Andrzej Dereszowski is credited with the discovery of this vulnerability.
VULNERABLE:

Sun Solaris 10_x86
Sun Solaris 10

NOT VULNERABLE:

Vai alla pagina originale su Security Focus

Discussion

Sun Solaris is prone to a denial-of-service vulnerability because the operating system fails to handle exceptional conditions.

An attacker can exploit this issue to cause the affected kernel to panic, resulting in a denial-of-service condition.

This issue affects the Solaris 10 operating system.

Exploit

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:vuldb@securityfocus.com.

Solution

Solution:
Sun has released patches and an advisory to address this issue. Please see the references for more information.

References

References:

• Solaris Home Page (Sun Microsystems)
  
• Sun Alert ID 102965: A Security Vulnerability in Solaris 10 NFS XDR Handling Ma (Sun Microsystems)
  

PhpLog