ZeroBox Vulnerability Database

漏洞起因
设计错误
 
影响系统
Sun Solaris 10_x86
Sun Solaris 10_sparc
Sun Solaris 10.0_x86
Sun Solaris 10.0
Sun Solaris 10
Sun OpenSolaris build snv_94
Sun OpenSolaris build snv_93
Sun OpenSolaris build snv_92
Sun OpenSolaris build snv_91
Sun OpenSolaris build snv_90
Sun OpenSolaris build snv_89
Sun OpenSolaris build snv_88
Sun OpenSolaris build snv_87
Sun OpenSolaris build snv_86
Sun OpenSolaris build snv_85
Sun OpenSolaris build snv_84
Sun OpenSolaris build snv_83
Sun OpenSolaris build snv_82
Sun OpenSolaris build snv_81
Sun OpenSolaris build snv_80
Sun OpenSolaris build snv_78
Sun OpenSolaris build snv_77
Sun OpenSolaris build snv_76
Sun OpenSolaris build snv_68
Sun OpenSolaris build snv_67
Sun OpenSolaris build snv_64
Sun OpenSolaris build snv_61
Sun OpenSolaris build snv_59
Sun OpenSolaris build snv_58
Sun OpenSolaris build snv_57
 
不受影响系统
Sun OpenSolaris build snv_95
 
危害
远程攻击者可以利用漏洞对系统进行拒绝服务攻击。
 
攻击所需条件
攻击者必须访问Sun Solaris。
 
漏洞信息
Sun Solaris是一款商业性质的操作系统。
Sun Solaris包含的Sockets Direct Protocol (SDP)驱动(sdp(7D))存在安全漏洞，允许本地或远程非特权用户耗竭所有内核内存，造成拒绝服务攻击。
 
测试方法
 
厂商解决方案
用户可参考如下供应商提供的补丁：
Sun Solaris 10.0
Sun 141444-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1
Sun 141445-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141445-09-1
Sun Solaris 10_sparc
Sun 141444-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1
Sun Solaris 10.0_x86
Sun 141445-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141445-09-1
Sun Solaris 10_x86
Sun 141445-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141445-09-1
Sun Solaris 10
Sun 141444-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1
Sun 141445-09
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141445-09-1
 
漏洞提供者
Sun