PT-2007-1307 · Sun · Sun Solaris

Published 2007-02-23 · Updated 2018-10-30 · CVE-2006-7028

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 7 through 9

Description The issue allows remote attackers to cause a denial of service, resulting in a console hang, by flooding the system with small TCP/IP packets. The cause of this issue is unknown, but it may be related to the generation of a large amount of interrupts within the console or a hardware error. It is also possibly linked to "jabber". This issue has not been replicated by third parties.

Recommendations For Sun Solaris versions 7 through 9, consider implementing network traffic filtering to restrict the influx of small TCP/IP packets as a temporary workaround to minimize the risk of console hang.

Fix

Related Identifiers

CVE-2006-7028

Affected Products

Sun Solaris

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-7028 · Security Note
• http://securityfocus.com/archive/1/434920/30/4890/threaded · Note
• http://securityfocus.com/archive/1/435107/30/4710/threaded · Note
• http://securityfocus.com/archive/1/434449/30/4890/threaded · Note
• http://securityfocus.com/archive/1/435146/30/4890/threaded · Note