PT-2008-6257 · Sun+1 · Opensolaris+2

Publicado 2008-11-17 · Atualizado 2017-08-08 · CVE-2008-5111

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 and OpenSolaris snv 57 through snv 91

Description The issue is related to an unspecified vulnerability in the socket function. When InfiniBand hardware is not installed, it allows local users to cause a denial of service, resulting in a system panic. This is related to the socksdpv close function.

Recommendations For Sun Solaris versions 10 and OpenSolaris snv 57 through snv 91, consider restricting access to the socket function until a fix is available. As a temporary workaround, disabling the socksdpv close function may help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2008-5111

Produtos afetados

Infiniband

Opensolaris

Sun Solaris

Referências · 7

• http://secunia.com/advisories/32611 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-242806-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46611 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5111 · Nota de Segurança
• http://securitytracker.com/id?1021231 · Nota
• http://securityfocus.com/bid/32296 · Nota
• http://osvdb.org/49854 · Nota