PT-2009-4728 · Sun · Opensolaris+1

Published 2009-07-02 · Updated 2009-07-15 · CVE-2009-2297

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10, and OpenSolaris snv 90 through snv 108

Description The issue is related to an unspecified vulnerability in the udp subsystem in the kernel when Solaris Trusted Extensions is enabled. This allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, which is related to a "TX panic." The problem exists due to a regression in earlier kernel patches.

Recommendations For Sun Solaris versions 10, and OpenSolaris snv 90 through snv 108, consider disabling Solaris Trusted Extensions as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-2297

Affected Products

Opensolaris

Sun Solaris

References · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2297 · Security Note
• http://secunia.com/advisories/35579 · Note