CVE-2007-5726: Medium severity Sun Solaris vulnerability

Published Oct 30, 2007

Updated

Unspecified vulnerability in the Stream Control Transmission Protocol (sctp) functionality in Sun Solaris 10, when at least one SCTP socket is in the LISTEN state, allows remote attackers to cause a denial of service (panic) via unspecified vectors related to "INIT processing."

Affected Software

2 affected components

Sun Solaris=10.0

Sun Solaris=10.0-unkown

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103101-1

Event History

Oct 30, 2007

CVE Published

09:46 PM

Oct 31, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5726?

CVE-2007-5726 is classified as a denial of service vulnerability that can cause a system panic.

How do I fix CVE-2007-5726?

To fix CVE-2007-5726, you should apply the latest patches provided by Oracle for Solaris 10.

What systems are affected by CVE-2007-5726?

CVE-2007-5726 affects Sun Solaris 10 on both SPARC and x86 architectures.

What happens if CVE-2007-5726 is exploited?

If exploited, CVE-2007-5726 allows remote attackers to trigger a denial of service condition on the affected system.

What is the attack vector for CVE-2007-5726?

The attack vector for CVE-2007-5726 involves unspecified vectors related to 'INIT processing' in SCTP functionality.