CVE-1999-0908: Medium severity Sun Solaris vulnerability
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutexenter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to affected Oracle Solaris / SunOS hosts until a vendor patch is available. Block or filter untrusted inbound TCP connections (especially to services using the TCP streams driver) at the network perimeter or host firewall, and limit access to trusted management networks only.
- Operational
Monitor Oracle/Sun (Solaris/SunOS/ZFS) advisories for a vendor-supplied patch and apply the provided update as soon as it is released. After applying the vendor fix, reboot affected systems and verify that kernel panics no longer occur in logs.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0908?
CVE-1999-0908 is classified as a high-severity vulnerability due to its potential to cause a Denial of Service.
How do I fix CVE-1999-0908?
To mitigate CVE-1999-0908, apply the latest patches provided by your Solaris or SunOS vendor.
What types of systems are affected by CVE-1999-0908?
CVE-1999-0908 affects multiple versions of Solaris and SunOS, including 2.5.1, 5.7, 7.0, and 5.5.1.
What is the attack vector for CVE-1999-0908?
The attack vector for CVE-1999-0908 involves a malicious TCP connection that causes server instability.
What is the impact of exploiting CVE-1999-0908?
Exploitation of CVE-1999-0908 results in a server panic, leading to a Denial of Service and potential system downtime.