----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Sun Solaris Firewall Security Bypass and Denial of Service

SECUNIA ADVISORY ID:
SA29100

VERIFY ADVISORY:
http://secunia.com/advisories/29100/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass, DoS

WHERE:
>From remote

OPERATING SYSTEM:
Sun Solaris 9
http://secunia.com/product/95/
Sun Solaris 8
http://secunia.com/product/94/
Sun Solaris 10
http://secunia.com/product/4813/

DESCRIPTION:
Sun has acknowledged a vulnerability in Solaris, which can be
exploited by malicious people to bypass certain security restrictions
and cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error within the
Solaris Internet Protocol implementation. This can be exploited to
bypass certain firewall policies or cause a kernel panic by sending
specially crafted packets to a vulnerable system.

The vulnerability is reported in Solaris 8, 9, and 10 for both the
x86 and SPARC platforms.

SOLUTION:
Apply patches.

-- SPARC Platform --

Solaris 8:
Apply patch 116965-30 or later
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116965-30-1

Solaris 9:
Apply patch 114344-32 or later
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114344-32-1

Solaris 10:
Apply patch 118822-27 or later
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-118822-27-1

-- x86 Platform --

Solaris 8:
Apply patch 116966-29 or later
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116966-29-1

Solaris 9:
Apply patch 119435-20 or later
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-119435-20-1

Solaris 10:
Apply patch 118844-28 or later
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-118844-28-1

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Mark Dowd, IBM Internet Security Systems X-Force

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200183-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------