Note: This is an archival copy of Security Sun Alert 201224 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1000912.1.
Solaris 8 Operating System
Date of Resolved Release
Solaris 8 systems configured to use Internet Protocol Version 6 (ip6(7P)) may panic when processing certain IPv6 packets. A local or remote user may be able to send IPv6 packets which would panic the system causing a Denial of Service.
This issue can occur in the following releases:
Note: Solaris 2.6, Solaris 7 and Solaris 9 are not impacted by this issue.
The symptom of this issue is a system panic.
To work around the described issue, disable IPv6 on the system.
To determine if a system is running with IPv6 enabled, run the following command:
$ ifconfig -a6
If entries are printed marked "UP and RUNNING" then the system is utilizing IPv6.
To disable IPv6 on a system, run the following command as root:
# ifconfig -a6 down
Edit the "/etc/nsswitch.conf" file and change the ipnodes entry to be "files" only. IPv6 will function again after a reboot.
Note: To disable IPv6 on systems across a system reboot, the "/etc/hostname6.<interface>" files can be temporarily renamed.
This issue is addressed in the following releases:
This solution has no attachment