PT-2008-5833 · Sun · Sun Solaris

Federico L. Bossi Bonin · Publicado 2008-10-20 · Atualizado 2018-10-30 · CVE-2008-4619

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris version 9

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted request to a specific procedure in the RPC subsystem. This is related to the XDR DECODE operation and the taddr2uaddr function.

Recommendations For Sun Solaris version 9, consider restricting access to the RPC subsystem to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the rpcbind service may help prevent the daemon crash.

Exploit

Correção

Identificadores relacionados

CVE-2008-4619

Produtos afetados

Sun Solaris

Referências · 11

• 🔥 https://exploit-db.com/exploits/6775 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4619 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46057 · Nota
• http://vupen.com/english/advisories/2008/2945 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200412-1 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00819.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2008/10/29/1 · Nota
• http://securityreason.com/securityalert/4440 · Nota
• http://openwall.com/lists/oss-security/2008/10/31/2 · Nota
• http://openwall.com/lists/oss-security/2008/10/28/2 · Nota
• http://secunia.com/advisories/32475 · Aviso do Fabricante