PT-2009-3510 · Oracle · Solaris

Publicado 2009-03-17 · Atualizado 2017-09-29 · CVE-2009-0923

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Solaris versions 10 and OpenSolaris snv 01 through snv 110

Description The issue affects the Kerberos Incremental Propagation in Solaris, allowing remote attackers to cause a denial of service. This is related to the master Key Distribution Center (KDC) server, but the specific vectors used by the attackers are unknown. The denial of service results in the loss of incremental propagation requests to slave KDC servers.

Recommendations For Solaris 10 and OpenSolaris snv 01 through snv 110, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2009-0923

Produtos afetados

Solaris

Referências · 11

• http://vupen.com/english/advisories/2009/0741 · Aviso do Fabricante
• http://securityfocus.com/bid/34139 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1 · Aviso do Fabricante
• http://secunia.com/advisories/34487 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0923 · Nota de Segurança
• http://secunia.com/advisories/34298 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm · Nota
• http://securitytracker.com/id?1021851 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49276 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174 · Nota
• http://vupen.com/english/advisories/2009/0875 · Nota