This application requires Javascript for optimal performance.

Sun.Solaris.DHCP.Malformed.BOOTP.Packet.DoS

Release Date

Jun 10, 2010

Severity

medium

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Description

This indicates an attack attempt to exploit a denial-of-service vulnerability in Sun Solaris.

The vulnerability is caused by an error when the DHCP server daemon handles malicious DHCP requests. It allows a remote attacker to crash the application via sending a crafted DHCP request packet.

Affected Products

Sun Solaris 8
Sun Solaris 9
Sun Solaris 10
Sun OpenSolaris builds snv_01 through snv_102

Recommended Actions

Refer to the vendor's web site for the suggested workaround:
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2008-5010

Reference/s

http://www.securityfocus.com/bid/32213 (BugTraq)

Reference: VID-23137