Executive Summary

Summary
Title Sun Alert 243106 Security Vulnerability in Solstice X.25 May Allow Denial of Service (DoS)
Informations
Name SUN-243106 First vendor Publication 2008-11-07
Vendor Sun Last vendor Modification 2008-11-07
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:H/Au:N/C:N/I:N/A:C)
Cvss Base Score 4 Attack Range Local
Cvss Impact Score 6.9 Attack Complexity High
Cvss Expoit Score 1.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Product: Solstice X.25 9.2

A security vulnerability in Solstice X.25 may allow a local unprivileged user with read permission for "/dev/xty" to panic a system with multiple CPUs. The ability to panic a system is a type of Denial of Service (DoS).

Note: The default permissions for "/dev/xty" are "crw-rw-rw-" which allows all local users read access.

State: Resolved
First released: 07-Nov-2008

Original Source

Url : http://blogs.sun.com/security/entry/sun_alert_243106_security_vulnerability

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-362 Race Condition

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 2

Open Source Vulnerability Database (OSVDB)

Id Description
49722 Sun Solstice X.25 /dev/xty Local DoS

Nessus® Vulnerability Scanner

Date Description
2006-11-06 Name : The remote host is missing Sun Security Patch number 108669-21
File : solaris10_108669.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108670-21
File : solaris10_x86_108670.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108669-21
File : solaris7_108669.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108670-21
File : solaris7_x86_108670.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108669-21
File : solaris8_108669.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108670-21
File : solaris8_x86_108670.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108669-21
File : solaris9_108669.nasl - Type : ACT_GATHER_INFO
2006-11-06 Name : The remote host is missing Sun Security Patch number 108670-21
File : solaris9_x86_108670.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2013-02-06 19:08:19
  • Multiple Updates