Executive Summary

Summary
Title Sun Alert 263388 Security Vulnerabilities in Solaris IP(7P) Module and STREAMS Framework May Lead to a Denial of Service (DoS) Condition
Informations
Name SUN-263388 First vendor Publication 2009-09-30
Vendor Sun Last vendor Modification 2009-11-11
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score 4.9 Attack Range Local
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Product: Solaris 8, Solaris 9, Solaris 10, OpenSolaris

Security vulnerabilities in the Solaris IP(7P) module and STREAMS Framework may allow an unprivileged local user to leak kernel memory, eventually causing the system to hang. This is a type of Denial of Service (DoS).

State: Resolved
First released: 30-Sep-2009
Sun Alert Link:http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1

Original Source

Url : http://blogs.sun.com/security/entry/sun_alert_263388_security_vulnerabilities

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-772 Missing Release of Resource after Effective Lifetime

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 3
Os 3

Open Source Vulnerability Database (OSVDB)

Id Description
58449 Solaris Kernel IP Module Unspecified Local DoS

Sun Solaris contains a flaw that may allow a local denial of service. The issue is triggered when a memory leak in the Solaris IP module occurs, and will result in loss of availability for the system.

Nessus® Vulnerability Scanner

Date Description
2007-03-18 Name : The remote host is missing Sun Security Patch number 122300-61
File : solaris9_122300.nasl - Type : ACT_GATHER_INFO