Update Protection against Sun Solaris rpc.ypupdated Command Injection Vulnerability
| Check Point Reference: | CPAI-2008-167 | |
| Date Published: | ||
| Severity: | ||
| Source: | SecurityFocus ID: 28383 | |
| Industry Reference(s): | CVE-1999-0208 | |
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? Sun Microsystems Solaris 10 and prior | ||
| Vulnerability Description Sun Solaris provides its Network Information Service (NIS) services through the SUN-RPC remote procedure call mechanism. One of these services is called rpc.ypupdated which is responsible for duplicating information from master NIS server to slave servers. A command injection vulnerability exists in Sun Solaris rpc.ypupdated service. A remote attacker may exploit this issue to execute arbitrary code on an affected system. |
||
|
Vulnerability Details The vulnerability is due to an error in the Sun Solaris rpc.ypupdated service that fails to properly validate user input when processing RPC requests. A remote attacker may exploit this vulnerability via a specially crafted RPC request sent to the vulnerable host. Successful exploitation may allow execution of arbitrary code on the target system. |
Protection Overview
By enabling this protection, SmartDefense will detect and block malformed RPC requests sent to the vulnerable service.
In order for the protection to be activated, update your VPN-1/InterSpect/Connectra product to the latest SmartDefense update. For information on how to update SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.