|
Sun update for Zebra
|
|
Secunia Advisory:
|
SA10435
|
|
|
Release Date:
|
2003-12-16
|
|
Popularity:
|
6,110 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Sun Linux 5.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0795
CVE-2003-0858
|
|
Description:
Sun has issued updated packages for Zebra. These fix two vulnerabilities allowing malicious people and local users to cause a Denial of Service.
An unspecified vulnerability exists in the Zebra telnet management service, which can be exploited to crash the service if a Zebra password has been enabled.
It is possible for local users to cause a Denial of Service by sending spoofed messages on the kernel netlink interface.
Solution:
Updated packages:
ftp://ftp.cobalt.sun.com/pub/products.../i386/RPMS/zebra-0.91a-8.7.2.i386.rpm
ftp://ftp.cobalt.sun.com/pub/products.../i386/SRPMS/zebra-0.91a-8.7.2.src.rpm
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
