Bug Id
6846265

Product
OpenSolaris

Date of Resolved Release
12-Apr-2010

.

1. Impact

This Alert covers CVE-2010-0895 for the IP Filter component of the OpenSolaris product.

Please see http://www.oracle.com/technology/deploy/security/alerts.htm
for more information about Critical Patch Updates and Security Alerts.
This publication relates to the CPU for April 2010.

2. Contributing Factors

These issues can occur in the following releases:

SPARC Platform

• OpenSolaris based upon builds snv_109 through snv_119
  

x86 Platform

• OpenSolaris based upon builds snv_109 through snv_119
  

Note 1: Solaris 8, 9, and 10 are not affected by this issue.

Note 2: This issue only affects systems with Solaris IP Filter enabled.
To determine if IP Filter is enabled the following command can be run:

   	$ svcs network/ipfilter
  	STATE          STIME    FMRI
   	enabled        Jan_08   svc:/network/ipfilter:default

3. Symptoms

4. Workaround

Create the /var/tmp/ipf directory with the correct permissions. As root do the following:

	# mkdir  /var/tmp/ipf
	# chmod 755 /var/tmp/ipf

5. Resolution

These issues are addressed in the following releases:

SPARC Platform

• OpenSolaris based upon builds snv_120 or later
  

x86 Platform

• OpenSolaris based upon builds snv_120 or later
  

Attachments

This solution has no attachment