PT-2009-3510 · Oracle · Solaris

Published 2009-03-17 · Updated 2017-09-29 · CVE-2009-0923

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Solaris versions 10 and OpenSolaris snv 01 through snv 110

Description The issue affects the Kerberos Incremental Propagation in Solaris, allowing remote attackers to cause a denial of service. This is related to the master Key Distribution Center (KDC) server, but the specific vectors used by the attackers are unknown. The denial of service results in the loss of incremental propagation requests to slave KDC servers.

Recommendations For Solaris 10 and OpenSolaris snv 01 through snv 110, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2009-0923

Affected Products

Solaris

References · 11

• http://vupen.com/english/advisories/2009/0741 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0923 · Security Note
• http://secunia.com/advisories/34298 · Vendor Advisory
• http://securityfocus.com/bid/34139 · Note
• http://secunia.com/advisories/34487 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm · Note
• http://securitytracker.com/id?1021851 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49276 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174 · Note
• http://vupen.com/english/advisories/2009/0875 · Note