Sun ASA-2006-148: Solaris sendmail DoS and NSS Memory Leak Vulnerability

From the screenshot, the following key vulnerability information can be extracted: Vulnerability Overview Sun Advisory Number: ASA-2006-148 Risk Level: Low Risk: Two security vulnerabilities affect Sun Microsystems' sendmail and NSS. - Vulnerability 102460: Versions of sendmail(1M) prior to 8.13.7 may contain a security vulnerability that could lead to a Denial of Service (DoS). - Vulnerability 102461: A memory leak in NSS may cause system hang or crash. --- Affected Products and Versions Products affected by sendmail 102460: - Solaris 9 Operating System - Solaris 10 Operating System - Solaris 8 Operating System Products affected by vulnerability 102461: - Sun Java Enterprise System 2003Q4 - Sun Java Enterprise System 2005Q1 - Sun Java Enterprise System 2004Q2 --- Related Mitigation Actions 1. For the sendmail DoS vulnerability: - It is recommended to set to by modifying the corresponding file in to prevent interruption. - Restart the service to apply the changes. - Configure to prevent from consuming excessive disk space. 2. For the memory leak vulnerability: - Subsequent upgrades for Avaya IR systems and most CMS products may include the fix. - CMS V9 and V11 versions require specific patches to resolve the vulnerability. - CMS R12, R13, and R13.1 versions require application of specific patch numbers. --- Notes and Additional Information This report was initially released in August 2006 and finally revised in November 2006. The final status of this report is "Final". Operating systems bundled with Avaya system-related products are also affected and require special attention. A disclaimer is emphasized at the bottom of the report, ensuring information accuracy and independence from product support agreements.

Goal Reached Thanks to every supporter — we hit 100%!

Sun ASA-2006-148: Solaris sendmail DoS and NSS Memory Leak Vulnerability