CVE:CVE-2008-5684
CNNVD:CNNVD-200812-397
libice 是 和X 客户端进行通讯的函数库。
Sun Solaris 8版本至10版本以及OpenSolaris snv_85之前的版本的X Inter Client Exchange library (又称libICE)中存在未明漏洞。见机行事的攻击者可以造成拒绝服务 (应用程序崩溃),例如一个可以触发Gnome session manager (又称gnome-session)段错误的端口扫描。
solution:Upgrade sun opensolaris to a higher version than snv_84,snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_77,snv_78,snv_79,snv_80,snv_81,snv_82,snv_83,snv_85,and avoid the version (,snv_84],snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_77,snv_78,snv_79,snv_80,snv_81,snv_82,snv_83,snv_85; Upgrade sun solaris to a higher version than 8,9,10,and avoid the version 8,9,10