Solaris ping服务拒绝漏洞

Solaris ping服务拒绝漏洞

漏洞ID 1105310 漏洞类型 未知
发布时间 1997-06-15 更新时间 2005-05-02
图片[1]-Solaris ping服务拒绝漏洞-安全小百科CVE编号 CVE-1999-1423
图片[2]-Solaris ping服务拒绝漏洞-安全小百科CNNVD-ID CNNVD-199706-013
漏洞平台 Solaris CVSS评分 2.1
|漏洞来源
https://www.exploit-db.com/exploits/19161
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199706-013
|漏洞详情
Solaris2.3到2.6版本中的ping存在漏洞。本地用户loopback界面对多路广播地址的ping请求导致服务拒绝(崩溃),例如ping-i。
|漏洞EXP
source: http://www.securityfocus.com/bid/209/info

The ping program is used to assess network connectivity between network devices. A denial of service condition exists in the ping program that may cause the system to panic by sending ping requests to a multicast address through the loopback interface. The system will ping itself; however, the incoming queue pointer is not yet initialized when the packet is received. Thus, the system will panic. 

%ping -sv -i 127.0.0.1 224.0.0.1
|参考资料

来源:BID
名称:209
链接:http://www.securityfocus.com/bid/209
来源:SUN
名称:00146
链接:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc;=secbull/146
来源:BUGTRAQ
名称:19971005SolarisPingBugandother[bc]oddities
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=87602558319180&w;=2
来源:BUGTRAQ
名称:19970627SUMMARY:SolarisPingbug(DoS)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=87602558319171&w;=2
来源:BUGTRAQ
名称:19970626SolarisPingbug(DoS)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=87602558319160&w;=2
来源:XF
名称:ping-multicast-loopback-dos(7492)
链接:http://www.iss.net/security_center/static/7492.php
来源:BUGTRAQ
名称:19970627SolarisPingbug(inetsvc)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=87602558319181&w;=2

相关推荐: Multiple Vendor Rdist [8LGM] Vulnerability 1996

Multiple Vendor Rdist [8LGM] Vulnerability 1996 漏洞ID 1105141 漏洞类型 Boundary Condition Error 发布时间 1996-07-03 更新时间 1996-07-03 CVE编号 N…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享