CVE-2008-4619 The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE opera...
HighCVSS 10.0
EPSS 12.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sunos | = 5.9 | No fix listed |
References
- 32475 third-party-advisory vendor-advisory
- 4440 third-party-advisory
- 200412 vendor-advisory
- [oss-security] 20081028 CVE-2008-4619 / milw0rm6775 mailing-list
- [oss-security] 20081029 Re: CVE-2008-4619 / milw0rm6775 mailing-list
- [oss-security] 20081031 Re: CVE-2008-4619 / milw0rm6775 mailing-list
- ADV-2008-2945 vdb-entry
- sunsolaris-rpc-dos(46057) vdb-entry
- 6775 exploit
- FEDORA-2008-9204 vendor-advisory