Description
The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv_01 though snv_85, allows local users to cause a denial of service (panic) via a self-encapsulated packet that lacks IPsec protection.
References
- 240086 vendor-advisory
- 33727 third-party-advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-114344-38-1
- http://support.avaya.com/elmodocs2/security/ASA-2009-043.htm
- oval:org.mitre.oval:def:6088 vdb-entry signature
- solaris-ipinip-dos(48328) vdb-entry
- ADV-2009-0365 vdb-entry
- 33504 vdb-entry