The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, allows remote attackers to cause a denial of service (panic) via unknown vectors that trigger a NULL pointer dereference.
http://secunia.com/advisories/33148
http://sunsolve.sun.com/search/document.do?assetkey=1-26-241126-1
http://www.securityfocus.com/bid/32861