CVE-1999-0908

Vulnerability

A vulnerability exists in the Solaris TCP/IP stack, specifically within the TCP streams driver. This issue can be triggered by a malicious connection that results in recursive calls to mutex_enter, leading to a system panic. The vulnerability affects Solaris 7.0 [1].

Exploitation

An attacker can trigger this vulnerability by using the nmap network mapping utility with the OS fingerprinting option (-O) against an active listening port on a target Solaris system. If the server listening on that port is then terminated, the system will panic due to the recursive calls to mutex_enter within the TCP streams driver [1]. The command example provided is $nmap -O -p 80 targethost.com [1].

Impact

Successful exploitation of this vulnerability results in a denial of service (DoS) by causing the affected Solaris system to panic and become unavailable. The attacker gains the ability to crash the server, disrupting its services.

Mitigation

Information regarding a specific patch or fixed version for this vulnerability is not yet disclosed in the available references. Users are advised to consult official Solaris security advisories for updates. This vulnerability is listed as CVE-1999-0908.