CVE-2006-3920: Medium severity Sun SunOS vulnerability
The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3920?
CVE-2006-3920 is classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2006-3920?
To fix CVE-2006-3920, update your affected Sun Solaris systems to the latest security patch released after July 26, 2006.
What are the affected versions of CVE-2006-3920?
CVE-2006-3920 affects Sun Solaris versions 8, 9, and 10 prior to the patch released on July 26, 2006.
What type of attack does CVE-2006-3920 enable?
CVE-2006-3920 enables a denial of service attack through the exploitation of TCP packets with incorrect sequence numbers.
Is there a workaround for CVE-2006-3920?
While a specific workaround is not recommended, administrators should monitor and filter anomalous TCP traffic to mitigate risks associated with CVE-2006-3920.