Vulnerabilities > CVE-2007-3458 - Local Denial of Service vulnerability in SUN Solaris 10.0/8.0/9.0

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
local
low complexity
sun
nessus

Summary

The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Name Service Caching Daemon (nscd) crash) via unspecified vectors.

Vulnerable Configurations

Part Description Count
OS
Sun
6

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_120036.NASL
    descriptionSunOS 5.10: libldap patch. Date this patch was last updated by Sun : Aug/31/06
    last seen2018-09-01
    modified2018-08-13
    plugin id43884
    published2010-01-14
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=43884
    titleSolaris 10 (sparc) : 120036-07
    code
    #%NASL_MIN_LEVEL 80502
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/10/24.
    #
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(43884);
     script_version("1.12");
    
     script_name(english: "Solaris 10 (sparc) : 120036-07");
     script_cve_id("CVE-2007-3458");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 120036-07");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.10: libldap patch.
    Date this patch was last updated by Sun : Aug/31/06');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "http://download.oracle.com/sunalerts/1000456.1.html");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C");
     script_set_attribute(attribute:"plugin_publication_date", value: "2010/01/14");
     script_cvs_date("Date: 2019/10/25 13:36:26");
     script_set_attribute(attribute:"vuln_publication_date", value: "2007/06/26");
     script_end_attributes();
    
     script_summary(english: "Check for patch 120036-07");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_126373.NASL
    descriptionSunOS 5.8: libsldap patch. Date this patch was last updated by Sun : Nov/12/07
    last seen2016-09-26
    modified2011-09-18
    plugin id25649
    published2007-07-02
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=25649
    titleSolaris 8 (sparc) : 126373-05
    code
    #%NASL_MIN_LEVEL 999999
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/09/17.
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(25649);
     script_version("1.24");
    
     script_name(english: "Solaris 8 (sparc) : 126373-05");
     script_cve_id("CVE-2007-3458");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 126373-05");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.8: libsldap patch.
    Date this patch was last updated by Sun : Nov/12/07');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "https://getupdates.oracle.com/readme/126373-05");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C");
     script_set_attribute(attribute:"plugin_publication_date", value: "2007/07/02");
     script_cvs_date("Date: 2018/08/13 14:32:38");
     script_set_attribute(attribute:"vuln_publication_date", value: "2007/06/26");
     script_end_attributes();
    
     script_summary(english: "Check for patch 126373-05");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2007-2018 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
    include("solaris.inc");
    
    e +=  solaris_check_patch(release:"5.8", arch:"sparc", patch:"126373-05", obsoleted_by:"128624-01 ", package:"SUNWarc", version:"11.8.0,REV=2000.01.08.18.12");
    e +=  solaris_check_patch(release:"5.8", arch:"sparc", patch:"126373-05", obsoleted_by:"128624-01 ", package:"SUNWarcx", version:"11.8.0,REV=2000.01.08.18.12");
    e +=  solaris_check_patch(release:"5.8", arch:"sparc", patch:"126373-05", obsoleted_by:"128624-01 ", package:"SUNWcsl", version:"11.8.0,REV=2000.01.08.18.12");
    e +=  solaris_check_patch(release:"5.8", arch:"sparc", patch:"126373-05", obsoleted_by:"128624-01 ", package:"SUNWcslx", version:"11.8.0,REV=2000.01.08.18.12");
    if ( e < 0 ) { 
    	if ( NASL_LEVEL < 3000 ) 
    	   security_warning(0);
    	else  
    	   security_warning(port:0, extra:solaris_get_report());
    	exit(0); 
    } 
    exit(0, "Host is not affected");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_112960.NASL
    descriptionSunOS 5.9: ldap library Patch. Date this patch was last updated by Sun : Jan/05/10
    last seen2016-09-26
    modified2011-09-18
    plugin id13526
    published2004-07-12
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=13526
    titleSolaris 9 (sparc) : 112960-70
    code
    #%NASL_MIN_LEVEL 999999
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/09/17.
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(13526);
     script_version("1.70");
    
     script_name(english: "Solaris 9 (sparc) : 112960-70");
     script_cve_id("CVE-2007-3458", "CVE-2009-2029", "CVE-2009-4080");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 112960-70");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.9: ldap library Patch.
    Date this patch was last updated by Sun : Jan/05/10');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "https://getupdates.oracle.com/readme/112960-70");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
     script_set_attribute(attribute:"plugin_publication_date", value: "2004/07/12");
     script_cvs_date("Date: 2018/08/13 14:32:38");
     script_set_attribute(attribute:"vuln_publication_date", value: "2007/06/26");
     script_end_attributes();
    
     script_summary(english: "Check for patch 112960-70");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2004-2018 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
    include("solaris.inc");
    
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWarc", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWarcx", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWcsl", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWcslx", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWcstl", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWcstlx", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWcsu", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWhea", version:"11.9.0,REV=2002.04.06.15.27");
    e +=  solaris_check_patch(release:"5.9", arch:"sparc", patch:"112960-70", obsoleted_by:"115695-02 ", package:"SUNWnisu", version:"11.9.0,REV=2002.04.06.15.27");
    if ( e < 0 ) { 
    	if ( NASL_LEVEL < 3000 ) 
    	   security_warning(0);
    	else  
    	   security_warning(port:0, extra:solaris_get_report());
    	exit(0); 
    } 
    exit(0, "Host is not affected");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_X86_114242.NASL
    descriptionSunOS 5.9_x86: ldap library Patch. Date this patch was last updated by Sun : Jan/05/10
    last seen2016-09-26
    modified2011-09-18
    plugin id13595
    published2004-07-12
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=13595
    titleSolaris 9 (x86) : 114242-55
    code
    #%NASL_MIN_LEVEL 999999
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/09/17.
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(13595);
     script_version("1.64");
    
     script_name(english: "Solaris 9 (x86) : 114242-55");
     script_cve_id("CVE-2007-3458", "CVE-2009-2029");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 114242-55");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.9_x86: ldap library Patch.
    Date this patch was last updated by Sun : Jan/05/10');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "https://getupdates.oracle.com/readme/114242-55");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
     script_set_attribute(attribute:"plugin_publication_date", value: "2004/07/12");
     script_cvs_date("Date: 2018/08/13 14:32:38");
     script_set_attribute(attribute:"vuln_publication_date", value: "2007/06/26");
     script_end_attributes();
    
     script_summary(english: "Check for patch 114242-55");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2004-2018 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
    include("solaris.inc");
    
    e +=  solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"114242-55", obsoleted_by:"115696-02 ", package:"SUNWarc", version:"11.9.0,REV=2002.11.04.02.51");
    e +=  solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"114242-55", obsoleted_by:"115696-02 ", package:"SUNWcsl", version:"11.9.0,REV=2002.11.04.02.51");
    e +=  solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"114242-55", obsoleted_by:"115696-02 ", package:"SUNWcstl", version:"11.9.0,REV=2002.11.04.02.51");
    e +=  solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"114242-55", obsoleted_by:"115696-02 ", package:"SUNWcsu", version:"11.9.0,REV=2002.11.04.02.51");
    e +=  solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"114242-55", obsoleted_by:"115696-02 ", package:"SUNWhea", version:"11.9.0,REV=2002.11.04.02.51");
    e +=  solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"114242-55", obsoleted_by:"115696-02 ", package:"SUNWnisu", version:"11.9.0,REV=2002.11.04.02.51");
    if ( e < 0 ) { 
    	if ( NASL_LEVEL < 3000 ) 
    	   security_warning(0);
    	else  
    	   security_warning(port:0, extra:solaris_get_report());
    	exit(0); 
    } 
    exit(0, "Host is not affected");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_X86_126374.NASL
    descriptionSunOS 5.8_x86: libsldap patch. Date this patch was last updated by Sun : Nov/12/07
    last seen2016-09-26
    modified2011-09-18
    plugin id25651
    published2007-07-02
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=25651
    titleSolaris 8 (x86) : 126374-05
    code
    #%NASL_MIN_LEVEL 999999
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/09/17.
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(25651);
     script_version("1.22");
    
     script_name(english: "Solaris 8 (x86) : 126374-05");
     script_cve_id("CVE-2007-3458");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 126374-05");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.8_x86: libsldap patch.
    Date this patch was last updated by Sun : Nov/12/07');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "https://getupdates.oracle.com/readme/126374-05");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C");
     script_set_attribute(attribute:"plugin_publication_date", value: "2007/07/02");
     script_cvs_date("Date: 2018/08/13 14:32:38");
     script_set_attribute(attribute:"vuln_publication_date", value: "2007/06/26");
     script_end_attributes();
    
     script_summary(english: "Check for patch 126374-05");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2007-2018 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
    include("solaris.inc");
    
    e +=  solaris_check_patch(release:"5.8_x86", arch:"i386", patch:"126374-05", obsoleted_by:"128625-01 ", package:"SUNWarc", version:"11.8.0,REV=2000.01.08.18.17");
    e +=  solaris_check_patch(release:"5.8_x86", arch:"i386", patch:"126374-05", obsoleted_by:"128625-01 ", package:"SUNWcsl", version:"11.8.0,REV=2000.01.08.18.17");
    if ( e < 0 ) { 
    	if ( NASL_LEVEL < 3000 ) 
    	   security_warning(0);
    	else  
    	   security_warning(port:0, extra:solaris_get_report());
    	exit(0); 
    } 
    exit(0, "Host is not affected");
    

Oval

accepted2007-09-27T08:57:45.094-04:00
classvulnerability
contributors
namePai Peng
organizationOpsware, Inc.
definition_extensions
  • commentSolaris 8 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1539
  • commentSolaris 9 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1457
  • commentSolaris 10 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1440
  • commentSolaris 8 (x86) is installed
    ovaloval:org.mitre.oval:def:2059
  • commentSolaris 9 (x86) is installed
    ovaloval:org.mitre.oval:def:1683
  • commentSolaris 10 (x86) is installed
    ovaloval:org.mitre.oval:def:1926
descriptionThe libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Name Service Caching Daemon (nscd) crash) via unspecified vectors.
familyunix
idoval:org.mitre.oval:def:2143
statusaccepted
submitted2007-08-10T12:25:18.000-04:00
titleSecurity Vulnerability in the Solaris libsldap Library May Allow a Denial of Service to nscd(1M)
version36