PT-2008-5833 · Sun · Sun Solaris

Federico L. Bossi Bonin · Published 2008-10-20 · Updated 2018-10-30 · CVE-2008-4619

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris version 9

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted request to a specific procedure in the RPC subsystem. This is related to the XDR DECODE operation and the taddr2uaddr function.

Recommendations For Sun Solaris version 9, consider restricting access to the RPC subsystem to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the rpcbind service may help prevent the daemon crash.

Exploit

Fix

Related Identifiers

CVE-2008-4619

Affected Products

Sun Solaris

References · 11

• 🔥 https://exploit-db.com/exploits/6775 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4619 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200412-1 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00819.html · Vendor Advisory
• http://secunia.com/advisories/32475 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46057 · Note
• http://vupen.com/english/advisories/2008/2945 · Note
• http://openwall.com/lists/oss-security/2008/10/29/1 · Note
• http://securityreason.com/securityalert/4440 · Note
• http://openwall.com/lists/oss-security/2008/10/31/2 · Note
• http://openwall.com/lists/oss-security/2008/10/28/2 · Note