|
|
|
View Notes By
|
|
|
|
Other Documents
|
|
|
|
|
Sun Information for VU#638099
| Date Notified: | 2002-04-12 |
| Date Updated: | |
| Statement Date: | |
| Status Summary: | Vulnerable |
Vendor StatementSun confirms that there is a format string vulnerability in rpc.rwalld(1M) which affects Solaris 2.5.1, 2.6, 7 and 8. However, this issue relies on a combination of events, including the exhaustion of system resources, which are difficult to control by a remote user in order to be exploited. Disabling rpc.rwalld(1M) in inetd.conf(4) is the recommended workaround until patches are available.
Sun is currently generating patches for this issue and will be releasing a Sun Security Bulletin once the patches are available. The bulletin will be available from:
http://sunsolve.sun.com/security
Sun patches are available from:
http://sunsolve.sun.com/securitypatchVendor InformationThe vendor has not provided us with any further information regarding this vulnerability.
Addendum rpc.rwalld is installed by default on Solaris 6, 7, and 8.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |
