From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Apr 21 2004 - 09:40:46 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Sun Fire IP TOS Denial of Service Vulnerability

SECUNIA ADVISORY ID:
SA11439

VERIFY ADVISORY:
http://secunia.com/advisories/11439/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
From remote

OPERATING SYSTEM:
Sun Fire 3800
Sun Fire 4800
Sun Fire 4810
Sun Fire 6800
Sun Netra 1280 Server

DESCRIPTION:
Sun has issued updates for Sun Fire products. These fix a
vulnerability allowing malicious people to cause a Denial of
Service.

The problem is that the units fail to handle IP packets with the TOS
field set. This may cause the System Controller to hang.

The vulnerability affects Netra 1280 and Sun Fire 3800/4800/4810/6800
running firmware 5.11.0 through 5.15.0.

SOLUTION:
Apply patches.

Sun Netra 1280 firmware revision 5.13.00xx through 5.13.0015:
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113751&rev=04

Sun Fire 3800/4800/4810/6800 firmware revision 5.14.5:
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112883&rev=06

Sun Fire 3800/4800/4810/6800 firmware revision 5.15.0:
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112884&rev=01

Systems with firmware prior to the above must be upgraded.

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57544

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]