Vulnerability Note VU#266817

Multiple Sun RPC-based libc implementations fails to provide time-out mechanism when reading data from TCP connections

Overview

A denial-of-service vulnerability exists in multiple vendor Sun RPC-based libc implementations.

I. Description

Multiple vendor Sun RPC-based libc implementations fail to properly read data from TCP connections. As a result, a remote attacker can deny service to system daemons.

II. Impact

A remote attacker can connect to a vulnerable service and cause the service to hang.

III. Solution

Apply a vendor patch when available.

Systems Affected

Vendor	Status	Date Updated
Apple Computer Inc.	Vulnerable	18-Nov-2002
BSDI	Unknown	8-Oct-2002
Conectiva	Unknown	7-Oct-2002
Cray Inc.	Unknown	30-Oct-2002
Data General	Unknown	7-Oct-2002
Debian	Unknown	14-Oct-2002
Engarde	Unknown	8-Oct-2002
FreeBSD	Unknown	8-Oct-2002
Fujitsu	Unknown	8-Oct-2002
GNU glibc	Vulnerable	4-Nov-2002
Hewlett-Packard Company	Unknown	14-Oct-2002
IBM	Vulnerable	15-Jan-2003
MandrakeSoft	Unknown	8-Oct-2002
MontaVista Software	Unknown	7-Oct-2002
NEC Corporation	Unknown	7-Oct-2002
NetBSD	Unknown	14-Oct-2002
OpenBSD	Unknown	7-Oct-2002
Openwall GNU/*/Linux	Unknown	8-Oct-2002
Red Hat Inc.	Unknown	8-Oct-2002
Sequent	Unknown	7-Oct-2002
SGI	Vulnerable	8-Nov-2002
Sony Corporation	Unknown	8-Oct-2002
Sun Microsystems Inc.	Vulnerable	28-Jan-2003
SuSE Inc.	Unknown	7-Oct-2002
The SCO Group (SCO Linux)	Unknown	7-Oct-2002
The SCO Group (SCO UnixWare)	Unknown	7-Oct-2002
Unisys	Unknown	14-Oct-2002
Wind River Systems Inc.	Unknown	7-Oct-2002
Wirex	Unknown	14-Oct-2002

References

http://www.securityfocus.com/bid/6103

Credit

This document was written by Ian A Finlay.

Other Information

Date Public	11/04/2002
Date First Published	11/04/2002 02:15:27 PM
Date Last Updated	04/09/2003
CERT Advisory
CVE Name	CAN-2002-1265
US-CERT Technical Alerts
Metric	10.31
Document Revision	21

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader