CVE-2007-5462: Input Validation

Published Oct 15, 2007

Updated

Unspecified vulnerability in the Sun Solaris RPC services library (librpcsvc) on Solaris 8 through 10 allows remote attackers to cause a denial of service (mountd crash) via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service (automountd crash) via unspecified requests to mount filesystems from a server that exports many filesystems.

Affected Software

6 affected components

Sun Solaris=8.0

Sun Solaris=9.0

Sun Solaris=10.0

Sun Solaris=9.0

Sun Solaris=8.0

Sun Solaris=10.0

Event History

Oct 15, 2007

CVE Published

10:17 PM

Oct 16, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5462?

CVE-2007-5462 is classified as a denial of service vulnerability affecting Solaris RPC services.

What versions of Solaris are affected by CVE-2007-5462?

CVE-2007-5462 affects Solaris versions 8.0, 9.0, and 10.0 on both SPARC and x86 architectures.

How do I fix CVE-2007-5462?

To address CVE-2007-5462, apply the relevant patches provided by Oracle for the affected Solaris versions.

What type of attack does CVE-2007-5462 facilitate?

CVE-2007-5462 allows remote attackers to crash the mountd service and can lead to denial of service.

Can local users exploit CVE-2007-5462?

Yes, local users can exploit CVE-2007-5462 to cause a denial of service affecting automountd.