CVE:CVE-2008-5689
CNNVD:CNNVD-200812-402
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。
Solaris的IP隧道实现中存在空指针引用漏洞，本地攻击者可以通过发送特制的SIOCGTUNPARAM IOCTL请求导致拒绝服务或执行任意内核态代码。
solution:Upgrade sun opensolaris to a higher version than snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_100,snv_101,snv_102,and avoid the version snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_100,snv_101,snv_102; Upgrade sun solaris to a higher version than 10.0,and avoid the version 10.0