[SA23700] Sun Solaris rpcbind Denial of Service

TITLE:
Sun Solaris rpcbind Denial of Service

SECUNIA ADVISORY ID:
SA23700

VERIFY ADVISORY:
http://secunia.com/advisories/23700/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From local network

OPERATING SYSTEM:
Sun Solaris 9
http://secunia.com/product/95/
Sun Solaris 8
http://secunia.com/product/94/

DESCRIPTION:
A vulnerability has been reported in Sun Solaris, which can be
exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error in libnsl
when handling malformed RPC requests, and can be exploited to kill
the rpcbind server.

The vulnerability is reported in Sun Solaris 8 and 9 for the SPARC
and x86 platforms.

SOLUTION:
– SPARC Platform –

Solaris 8:
Apply patch 108993-65 or later.

Solaris 9:
Apply patch 113319-27 or later.

– x86 Platform –

Solaris 8:
Apply patch 108994-65 or later.

Solaris 9:
Apply patch 113719-21 or later.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Anil Kumar, BlueLane Research Team.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102713-1

---

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.