CVE-2006-5396: Medium severity Sun Solaris vulnerability
Published Oct 18, 2006
·Updated
The tcpfusercvdrain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.
Affected Software
1 affected component
Sun Solaris=10.0
Event History
Oct 18, 2006
CVE Published
07:07 PM
Data Sourced
via NVD·07:07 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5396?
CVE-2006-5396 has been classified as a denial of service vulnerability.
2
How does CVE-2006-5396 affect Solaris 10 users?
CVE-2006-5396 allows local users on Solaris 10 to crash the system through a specific TCP loopback connection.
3
What is the impact of exploiting CVE-2006-5396?
Exploiting CVE-2006-5396 results in a system crash, making it unavailable for legitimate users.
4
How can CVE-2006-5396 be mitigated?
To mitigate CVE-2006-5396, users should update their Solaris 10 systems to the version released after October 17, 2006.
5
Who is affected by CVE-2006-5396?
Local users on systems running Solaris 10 before the October 17, 2006 update are affected by CVE-2006-5396.