Lucene search

MitreCVE-2006-4117

HistoryAug 14, 2006 - 9:04 p.m.

CVE-2006-4117

2006-08-1421:04:00

mitre

web.nvd.nist.gov

cve-2006-4117

squeue_drain

denial of service

sun solaris 10

cmt processors

tcp connections

nvd

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.045

Percentile

92.5%

JSON

The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service (“bad trap” and system panic) by opening and closing a large number of TCP connections (“heavy TCP/IP loads”). NOTE: the original report specifies the function name as “drain_squeue,” but this is likely incorrect.

Affected configurations

Nvd

Node

sunsolarisMatch10.0sparc

VendorProductVersionCPE
sunsolaris10.0cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	10.0	cpe:2.3:o:sun:solaris:10.0::sparc:::::

References

secunia.com/advisories/21453

securitytracker.com/id?1016674

sunsolve.sun.com/search/document.do?assetkey=1-26-102554-1

www.vupen.com/english/advisories/2006/3239

exchange.xforce.ibmcloud.com/vulnerabilities/28321

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.045

Percentile

92.5%

JSON

Related for CVE-2006-4117