CVE-2009-0480 Information

Description

The IP implementation in Sun Solaris 8 through 10 and OpenSolaris before snv_82 uses an improper arena when allocating minor numbers for sockets which allows local users to cause a denial of service (32-bit application failure and login outage) by opening a large number of sockets.

Reference

http://mail.opensolaris.org/pipermail/onnv-notify/2008-January/013262.html http://secunia.com/advisories/33751 http://securitytracker.com/id?1021653 http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-248026-1 http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm http://www.securityfocus.com/bid/33550 http://www.vupen.com/english/advisories/2009/0364 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A6038