Note: This is an archival copy of Security Sun Alert 201224 as previously published on http://sunsolve.sun.com.
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1000912.1.
Article ID : 1000912.1
Article Type : Sun Alerts (SURE)
Last reviewed : 2003-06-09
Audience : PUBLIC
Copyright Notice: Copyright © 2010, Oracle Corporation and/or its affiliates.

Solaris 8 IPv6 Enabled Systems May Panic Handling Certain Packets



Category
Security

Release Phase
Resolved

Product
Solaris 8 Operating System

Bug Id
4457722

Date of Resolved Release
21-JUL-2003

Impact

Solaris 8 systems configured to use Internet Protocol Version 6 (ip6(7P)) may panic when processing certain IPv6 packets. A local or remote user may be able to send IPv6 packets which would panic the system causing a Denial of Service.


Contributing Factors

This issue can occur in the following releases:

SPARC Platform

  • Solaris 8 without patch 108528-21

x86 Platform

  • Solaris 8 without patch 108529-21

Note: Solaris 2.6, Solaris 7 and Solaris 9 are not impacted by this issue.


Symptoms

The symptom of this issue is a system panic.


Workaround

To work around the described issue, disable IPv6 on the system.

To determine if a system is running with IPv6 enabled, run the following command:

    $ ifconfig -a6

If entries are printed marked "UP and RUNNING" then the system is utilizing IPv6.

To disable IPv6 on a system, run the following command as root:

    # ifconfig -a6 down

Edit the "/etc/nsswitch.conf" file and change the ipnodes entry to be "files" only. IPv6 will function again after a reboot.

Note: To disable IPv6 on systems across a system reboot, the "/etc/hostname6.<interface>" files can be temporarily renamed.


Resolution

This issue is addressed in the following releases:

SPARC Platform

  • Solaris 8 with patch 108528-21 or later

x86 Platform

  • Solaris 8 with patch 108529-21 or later


Modification History

References

108528-21
108529-21




Attachments
This solution has no attachment