Sun Solaris fails to properly handle ICMP packets, which may allow a remote, unauthenticated attacker to cause a denial of service.
Sun Solaris 10 contains an unspecified error that can cause a system panic when handling a specially crafted ICMP packet. Note that Solaris 8 and 9 are not affected by this issue.
A remote, unauthenticated attacker may be able to create a denial-of-service condition by causing a system panic on a vulnerable Sun Solaris system.
Apply a patch
This issue is addressed by patch 118833-28 for Solaris 10 on SPARC systems, and patch 118855-28 for Solaris 10 on x86 systems. More details are available in SunSolve Alert 102697.
Thanks to Sun for reporting this vulnerability.
This document was written by Will Dormann.
|Date First Published:||2007-01-31|
|Date Last Updated:||2007-02-07 19:53 UTC|