CVE-1999-0908 Denial of service in n/a
Remote attackers can crash Solaris servers by sending malicious TCP connections that trigger recursive mutex calls in the streams driver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0908?
CVE-1999-0908 is a medium-severity denial of service vulnerability in Sun Solaris, published on 22 Mar 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
Which versions are affected by CVE-1999-0908?
It affects 2 products.
Products include Sun Solaris, Sun Sunos.
How do I fix CVE-1999-0908?
No fix has been published for CVE-1999-0908 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-1999-0908 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-1999-0908 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Sun Solaris
Sources
Also known as GHSA-cxgc-8c6p-75xc.