Sun Cluster OpenSSL Vulnerabilities - Advisories

Sun Cluster OpenSSL Vulnerabilities

Secunia Advisory:	SA10691
Release Date:	2004-01-21

Critical:	Moderately critical
Impact:	DoS System access
Where:	From local network
Solution Status:	Vendor Workaround

Software:	Sun Cluster 3.x

CVE reference:	CVE-2003-0545 (Secunia mirror) CVE-2003-0543 (Secunia mirror) CVE-2003-0544 (Secunia mirror)



Description: Sun has acknowledged that Sun Cluster is affected by certain OpenSSL vulnerabilities, which can lead to a Denial of Service and potentially system access. For more information: SA9886 The vulnerability affects systems with SunPlex Manager configured. Solution: Sun recommends that the SunPlex Manager is disabled: /etc/init.d/initspm stop No other solutions has been suggested by Sun. Original Advisory: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57475 Other References: SA9886: http://secunia.com/advisories/9886/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

5 Related Secunia Security Advisories

1. Sun Cluster Global File System Unspecified Vulnerability

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Opera Multiple Vulnerabilities

2.	Sun Solaris NFSv4 Client Kernel Module Denial of Service

3.	Banner Management "id" SQL Injection Vulnerability

4.	Avaya CMS Solaris "picld" Denial of Service

5.	Active PHP Bookmarks "id" SQL Injection Vulnerability

6.	Avaya CMS Solaris "snoop" Multiple Vulnerabilities

7.	Subdreamer Light Global Variables SQL Injection Vulnerability

8.	Ubuntu update for postfix

9.	Avaya CMS Solaris namefs Kernel Module Privilege Escalation

10.	WS_FTP Home / Professional Format String Vulnerability