Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv_99 through snv_123, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors that trigger a "dangling sshd authentication thread."

SunOS 5.10_x86: ssh and openssl patch.
Date this patch was last updated by Sun : Jun/18/10

SunOS 5.10: ssh patch.
Date this patch was last updated by Sun : Jun/18/10

The remote Solaris 10 host appears to be running the Solaris sshd daemon earlier than version 1.1.3.  Such versions are potentially affected by a denial-of-service vulnerability in the timeout mechanism.  An unprivileged attacker, exploiting this flaw, could crash the affected service.

ID	Name	Product	Family	Severity
108025	Solaris 10 (x86) : 141525-10	Nessus	Solaris Local Security Checks	medium
107539	Solaris 10 (sparc) : 143140-04	Nessus	Solaris Local Security Checks	medium
5247	Sun Solaris sshd Timeout Mechanism Remote Denial of Service	Nessus Network Monitor	SSH	medium
42919	Solaris 10 (sparc) : 143140-04	Nessus	Solaris Local Security Checks	medium
42188	Solaris 10 (x86) : 141525-10	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2009-4075

high

Tenable Plugins

medium

medium

medium

medium

medium