A security vulnerability related to a race condition during the handling of thread contexts in the Solaris kernel may allow a local unprivileged user to panic the system and thereby cause a Denial of Service (DoS) condition.

A security vulnerability in the Solaris 8 and 9 IP implementation may allow a remote unprivileged user to degrade the performance of a networked Solaris system by sending specially crafted IP packets. This could result in a mild Denial of Service (DoS) against network services provided by the system and/or local services, due to increased CPU usage.

Two buffer overflows have been found in the SOCKS module of Sun Java System Web Proxy Server 4.0 which may allow a local or remote unprivileged user the ability to execute arbitrary code with the privileges of the SOCKS server or cause a Denial of Service (DoS) to the SOCKS server. The SOCKS server normally runs with root privileges.

One of the vulnerabilities (BugID 6537736) requires authentication before it can be exploited; however, the default configuration is for no authentication to be required to access the SOCKS server.

Sun acknowledges with thanks, iDefense (http://www.idefense.com), for bringing these issues to our attention.

These issues are also described in the following document:

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536

Sun Java System Application Server, Web Server and Proxy Server make use of the Network Security Services (NSS) library and are impacted by a number of security vulnerabilities related to the SSL2 implementation in that library if SSL2 is enabled in these servers. These vulnerabilities may allow remote users to cause the server to exit unexpectedly, causing a denial of service (DoS) to the application, or to execute arbitrary code.

These issues are also described in the following documents:

• CVE-2007-0008 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008
• CVE-2007-0009 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0009
• CERT VU#377812 at: http://www.kb.cert.org/vuls/id/377812
• CERT VU#592796 at: http://www.kb.cert.org/vuls/id/592796

Other Sun products make use of the NSS library. For information regarding the impact to other products, please see Sun Alert 102856 at:

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102856-1

A privileged user on a Sun Cluster node which is a current cluster member may be able to corrupt in-memory data structures of a sibling cluster node. This can lead to a system panic and/or data corruption on the sibling node which can affect application throughput or availability of data or applications to end users depending on how the Sun Cluster is configured and is thus a type of Denial of Service (DoS).

Remote unprivileged users may cause named(1M) to ultimately return incorrect addresses for Internet hosts thereby redirecting end users to unintended hosts and or services.

This issue is also referenced in the following documents:

• CVE-2007-2926 (CERT-US VU#553201) at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926
• Internet Systems Consortium Security bulletin at:  http://www.isc.org/sw/bind/bind-security.php