A vulnerability has been reported in Solaris, which can be exploited by malicious, local users to hijack network ports.
The vulnerability is caused due to an unspecified error making it possible to bind a process to a non-privileged network port, which already has been bound (e.g. by NFS or NIS). This may reportedly lead to disruption of network services, disclosure of sensitive information, or potentially compromise of other systems.
OPERATING SYSTEM: Sun Solaris 8
Sun Solaris 9
SOLUTION: Apply patches.
-- SPARC Platform --
Solaris 8:
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116965-08-1
Solaris 9:
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-118305-02-1
-- x86 Platform --
Solaris 8:
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116966-08-1
Solaris 9:
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117470-01-1
PROVIDED AND/OR DISCOVERED BY: Reported by vendor.
ORIGINAL ADVISORY: Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57766-1
VERIFY ADVISORY: http://secunia.com/advisories/14981/
Secunia Security Advisories
|