CVE-2003-1563: Medium severity Sun Solaris vulnerability
Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Identify the TCP port(s) used by the Distributed Lock Manager (DLM) in your Sun Cluster configuration, and prevent unauthorized local daemons from interfering with them. Implement host-based controls such as firewall/iptables/nftables rules to block connections to the DLM port(s) from non-cluster or untrusted addresses, and implement process allowlisting or OS RBAC so that only the Sun Cluster/cluster system processes (and authorised administrators) can start services that bind to those DLM port(s).
- Operational
Audit each cluster node for unauthorized daemons listening on the DLM TCP port(s). Locate listening processes (for example by examining netstat/lsof output), stop/terminate any unauthorized daemons, remove or disable the user-installed daemon, and review local user accounts and privileges to prevent reinstallation or relaunch.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1563?
CVE-2003-1563 is classified as a denial of service vulnerability impacting Sun Cluster versions 2.2 to 3.2.
How do I fix CVE-2003-1563?
To mitigate CVE-2003-1563, ensure that TCP ports used by the Distributed Lock Manager are not occupied by unauthorized daemons.
What versions are affected by CVE-2003-1563?
CVE-2003-1563 affects Sun Cluster versions 2.2, 3.0, 3.1, and 3.2.
Can local users exploit CVE-2003-1563?
Yes, local users can exploit CVE-2003-1563 to cause a cluster node panic or abort.
What system does CVE-2003-1563 impact?
CVE-2003-1563 specifically impacts Sun Cluster used in Oracle Parallel Server and Real Application Clusters environments.