Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 ICMP报文处理过程实现上存在安全漏洞,远程非特权用户可能利用此漏洞导致拒绝服务(DoS)。 如果触发了上述漏洞,系统可能变得忙碌,栈追踪类似于: ip:ill_refrele+0x8(0x0, 0x0, 0x0, 0x1010) ip:ip_output+0x149c(0x0?, 0x6000864f2c0?, 0x60001bcede0?, , 0x2) ip:ip_wput(0x60001bcede0, 0x600053ac140) - frame recycled unix:put+0x1c0(0x60001bcede0?, 0x600053ac140) ip:icmp_inbound+0xb88(0x60001bcece8, 0x6000864f2c0, 0x0, 0x30000c31268, 0x0, 0x0, 0x0, 0x1, , 0x2) ip:ip_proto_input+0x56c(, 0x6000864f2c0, 0x600086e7500, 0x60003a24ed8, 0x30000c31268) ip:ip_input+0x7d0(0x30000c31268, 0x0, , , 0xffffffff) ip:ip_rput(0x60001bcece8, 0x6000864f300) - frame recycled Sun Solaris 10_x86 Sun Solaris 10.0 临时解决方法: * 应使用报文过滤软件(如捆绑于Solaris 10的ipfilter(5))阻断ICMP报文。 厂商补丁: Sun --- Sun已经为此发布了一个安全公告(Sun-Alert-102697)以及相应补丁: Sun-Alert-102697:A Security Vulnerability in Solaris 10 ICMP Handling May Allow a SystemPanic and Result in Denial of Service (DoS) 链接:<a href="http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-102697-1"...
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 ICMP报文处理过程实现上存在安全漏洞,远程非特权用户可能利用此漏洞导致拒绝服务(DoS)。 如果触发了上述漏洞,系统可能变得忙碌,栈追踪类似于: ip:ill_refrele+0x8(0x0, 0x0, 0x0, 0x1010) ip:ip_output+0x149c(0x0?, 0x6000864f2c0?, 0x60001bcede0?, , 0x2) ip:ip_wput(0x60001bcede0, 0x600053ac140) - frame recycled unix:put+0x1c0(0x60001bcede0?, 0x600053ac140) ip:icmp_inbound+0xb88(0x60001bcece8, 0x6000864f2c0, 0x0, 0x30000c31268, 0x0, 0x0, 0x0, 0x1, , 0x2) ip:ip_proto_input+0x56c(, 0x6000864f2c0, 0x600086e7500, 0x60003a24ed8, 0x30000c31268) ip:ip_input+0x7d0(0x30000c31268, 0x0, , , 0xffffffff) ip:ip_rput(0x60001bcece8, 0x6000864f300) - frame recycled Sun Solaris 10_x86 Sun Solaris 10.0 临时解决方法: * 应使用报文过滤软件(如捆绑于Solaris 10的ipfilter(5))阻断ICMP报文。 厂商补丁: Sun --- Sun已经为此发布了一个安全公告(Sun-Alert-102697)以及相应补丁: Sun-Alert-102697:A Security Vulnerability in Solaris 10 ICMP Handling May Allow a SystemPanic and Result in Denial of Service (DoS) 链接:<a href="http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-102697-1" target="_blank">http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-102697-1</a> 补丁下载: <a href="http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=118855-28&method=h" target="_blank">http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=118855-28&method=h</a>