PT-2008-6257 · Sun+1 · Opensolaris+2

Published 2008-11-17 · Updated 2017-08-08 · CVE-2008-5111

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 and OpenSolaris snv 57 through snv 91

Description The issue is related to an unspecified vulnerability in the socket function. When InfiniBand hardware is not installed, it allows local users to cause a denial of service, resulting in a system panic. This is related to the socksdpv close function.

Recommendations For Sun Solaris versions 10 and OpenSolaris snv 57 through snv 91, consider restricting access to the socket function until a fix is available. As a temporary workaround, disabling the socksdpv close function may help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-5111

Affected Products

Infiniband

Opensolaris

Sun Solaris

References · 7

• http://secunia.com/advisories/32611 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-242806-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5111 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46611 · Note
• http://securitytracker.com/id?1021231 · Note
• http://securityfocus.com/bid/32296 · Note
• http://osvdb.org/49854 · Note