---------------------------------------------------------------------- Do you have VARM strategy implemented? (Vulnerability Assessment Remediation Management) If not, then implement it through the most reliable vulnerability intelligence source on the market. Implement it through Secunia. For more information visit: http://secunia.com/advisories/business_solutions/ Alternatively request a call from a Secunia representative today to discuss how we can help you with our capabilities contact us at: sales@secunia.com ---------------------------------------------------------------------- TITLE: Sun Solaris rpc.nisd NIS+ Server Denial of Service SECUNIA ADVISORY ID: SA35406 VERIFY ADVISORY: http://secunia.com/advisories/35406/ DESCRIPTION: A vulnerability has been reported in Sun Solaris, which can be exploited by malicious users to cause a DoS (Denial of Service). The vulnerability is caused due to an unspecified error in "rpc.nisd", which can be exploited to prevent a NIS+ server from responding to NIS+ client requests. The vulnerability is reported in Solaris 8, 9, and 10 for both the SPARC and x86 platforms. SOLUTION: Apply the patches. -- SPARC Platform -- Solaris 8: Apply patch 128624-09 or later. http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-128624-09-1 Solaris 9: Apply patch 112960-65 or later. http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-112960-65-1 Solaris 10: Apply patch 140917-01 or later. http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-140917-01-1 OpenSolaris: Fixed in build snv_104 or later. -- x86 Platform -- Solaris 8: Apply patch 128625-09 or later. http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-128625-09-1 Solaris 9: Apply patch 114242-50 or later. http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114242-50-1 Solaris 10: Apply patch 140918-01 or later. http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-140918-01-1 OpenSolaris: Fixed in build snv_104 or later. PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: http://sunsolve.sun.com/search/document.do?assetkey=1-66-256748-1 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------