DOCUMENT ID: 57040
   SYNOPSIS: The AM7990 ("LANCE") Ethernet Driver (le(7D)) Reuses Old
   Frame Buffer Data to Pad Packets
   DETAIL DESCRIPTION:

Sun(sm) Alert Notification

     * Sun Alert ID: 57040
     *
       Synopsis: The Am7990 ("LANCE") Ethernet Driver (le(7D)) Reuses Old
       Frame Buffer Data to Pad Packets
     *
       Category: Security
     *
       Product: Solaris
     * BugIDs: 4105008
     * Avoidance: Patch
     *
       State: Resolved
     * Date Released: 02-Oct-2003
     * Date Closed: 02-Oct-2003
     * Date Modified:

1. Impact

   The Sun Am7990 ("LANCE") Ethernet driver (le(7D)) may reuse old frame
   buffer data to pad packets resulting in an information leakage
   vulnerability that may allow a remote privileged user to harvest
   sensitive information from network traffic.

   This issue is described in CERT Vulnerability VU#412115 (see
   http://www.kb.cert.org/vuls/id/412115 and
   http://www.kb.cert.org/vuls/id/JPLA-5BGNYP).

2. Contributing Factors

   This issue can occur in the following releases:

   SPARC Platform
     * Solaris 2.6 without patch 105181-35
     * Solaris 7 without patch 112604-02
     * Solaris 8 without patch 112609-02
     * Solaris 9 without patch 115172-01

   Note: The Am7990 ("LANCE") Ethernet driver le(7D) is for SPARC
   platforms only, thus x86 platforms are not affected.

   This issue only occurs on SPARC systems that utilize the Am7990
   ("LANCE") Ethernet driver (le(7D)).

   To determine if the Am7990 Ethernet driver is installed on your
   system, run the following command:
    $ ifconfig -a
    le0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 1
            inet 127.0.0.0 netmask ff000000

   Any reference to "le0" would indicate an open Lance Ethernet (le)
   interface.

3. Symptoms

   There are no predictable symptoms that would show the described issue
   has been exploited.
   SOLUTION SUMMARY:

4. Relief/Workaround

   There is no workaround for this issue. Please see "Resolution" section
   below.

5. Resolution

   This issue is addressed in the following releases:

   SPARC Platform
     * Solaris 2.6 with patch 105181-35 or later
     * Solaris 7 with patch 112604-02 or later
     * Solaris 8 with patch 112609-02 or later
     * Solaris 9 with patch 115172-01 or later

   This Sun Alert notification is being provided to you on an "AS IS"
   basis. This Sun Alert notification may contain information provided by
   third parties. The issues described in this Sun Alert notification may
   or may not impact your system(s). Sun makes no representations,
   warranties, or guarantees as to the information contained herein. ANY
   AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION
   WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
   NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT
   YOU ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT,
   INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE
   OUT OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN.
   This Sun Alert notification contains Sun proprietary and confidential
   information. It is being provided to you pursuant to the provisions of
   your agreement to purchase services from Sun, or, if you do not have
   such an agreement, the Sun.com Terms of Use. This Sun Alert
   notification may only be used for the purposes contemplated by these
   agreements.

   Copyright 2000-2003 Sun Microsystems, Inc., 4150 Network Circle, Santa
   Clara, CA 95054 U.S.A. All rights reserved.
     _________________________________________________________________
     _________________________________________________________________

   APPLIES TO:
   ATTACHMENTS: