PT-2005-2511 · Oracle · Solaris

Published 2005-05-11 · Updated 2018-10-30 · CVE-2005-1518

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Solaris versions 7 through 9

Description The issue allows local users to cause a denial of service when accessing /xfn/ x500, resulting in an automountd crash. This occurs when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration.

Recommendations For Solaris versions 7 through 9, consider disabling the use of Federated Naming Services (FNS) with autofs and FNS X.500 configuration as a temporary workaround to minimize the risk of exploitation. Restrict access to the /xfn/ x500 path to prevent the automountd crash.

Fix

Related Identifiers

CVE-2005-1518

Affected Products

Solaris

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-1518 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1 · Vendor Advisory
• http://vupen.com/english/advisories/2005/0517 · Note