|
|
>> Sun Solaris NFS RPC Zone Denial of Service Vulnerability
|
Title : Sun Solaris NFS RPC Zone Denial of Service Vulnerability
VUPEN ID : VUPEN/ADV-2008-2441
CVE ID : CVE-2008-3838
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2008-08-27
|
A vulnerability has been identified in Sun Solaris and OpenSolaris, which could be exploited by local attackers to cause a denial of service. This issue is caused by an unspecified error in the NFS Remote Procedure Calls (RPC) zones implementation, which may allow a local user with administrative privileges in a non-global zone to intercept and corrupt NFS traffic destined for other non-global zones on the system, creating a denial of service condition.
Affected Products
Sun Solaris 10
Sun OpenSolaris
Solution
Sun Solaris 10 (SPARC) - Apply patch 138070-02 or later
Sun OpenSolaris (SPARC) - Upgrade to build snv_88 or later
Sun Solaris 10 (x86) - Apply patch 138071-02 or later
Sun OpenSolaris (x86) - Upgrade to build snv_88 or later
References
http://www.vupen.com/english/advisories/2008/2441
http://sunsolve.sun.com/search/document.do?assetkey=1-66-240866-1
Credits
Vulnerability reported by Hewitt Associates.
ChangeLog
2008-08-27 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
