Description

Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.

References

• CVE-1999-0079
• CVE-2008-4247
• CVE-2010-0083
• CVE-2010-0916
• CVE-2010-2376
• CVE-2010-2382
• CVE-2010-2383
• CVE-2010-2384
• CVE-2010-2386
• CVE-2010-2392
• CVE-2010-2393
• CVE-2010-2394
• CVE-2010-2399
• CVE-2010-2400
• CVE-2010-2632
• NETBSD-NetBSD-SA2008-014
• SUNPATCH-111607-09
• URL: http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
• XF-64798

Solution

Related Vulnerabilities

• FreeBSD: proftpd -- Long Command Processing Vulnerability (Multiple CVEs)
• Sun Patch: SunOS 5.9: Resource Management User Interface Patch
• Sun Patch: OpenWindows 3.6.2: Tooltalk patch
• Sun Patch: SunOS 5.8: /usr/sbin/in.ftpd patch
• Sun Patch: SunOS 5.10: Sun GigaSwift Ethernet 1.0 driver patch
• Sun Patch: SunOS 5.7: /usr/sbin/in.ftpd Patch
• Sun Patch: CDE 1.5: ToolTalk patch
• Sun Patch: SunOS 5.9_x86: Sun GigaSwift Ethernet 1.0 driver patch
• Sun Patch: SunOS 5.8: User Manager CLI Patch
• Sun Patch: SunOS 5.9: Kernel Patch
• FreeBSD: FreeBSD -- glob(3) related resource exhaustion (FreeBSD-SA-13:02.libc) (CVE-2010-2632)
• Sun Patch: SunOS 5.10: ftp and in.ftpd patch
• Sun Patch: OpenWindows 3.6.2_x86: Tooltalk patch
• Sun Patch: SunOS 5.9_x86: usr/sadm/lib/usermgr/VUserMgr.jar Patch
• Sun Patch: SunOS 5.9: usr/sadm/lib/usermgr/VUserMgr.jar Patch
• Sun Patch: SunOS 5.10: Solaris kernel patch
• Sun Patch: SunOS 5.8_x86: suninstall Patch
• Sun Patch: SunOS 5.10: Flash Archive Patch
• Juniper Junos OS: GNU libc glob(3) 'GLOB_LIMIT' Remote Denial of Service Vulnerability (JSA10598) (CVE-2010-2632)
• Sun Patch: CDE 1.5_x86: ToolTalk patch
• OS X update for Libsystem (CVE-2010-2632)
• Sun Patch: SunOS 5.7_x86: /usr/sbin/in.ftpd Patch
• Sun Patch: CDE 1.6: ToolTalk RPC patch
• Sun Patch: SunOS 5.8_x86: User Manager CLI Patch
• Sun Patch: SunOS 5.10: Solaris Management Applications Patch
• Sun Patch: SunOS 5.8_x86: /usr/lib/nfs/nfslogd patch
• Sun Patch: SunOS 5.9_x86: /usr/snadm/lib Library and Differential Flash Patch
• Multiple PASV Denial of Service
• OS X security update 2011-004 for AirPort (CVE-2010-2632)
• Sun Patch: SunOS 5.10_x86: Resource Management User Interface Patch
• Sun Patch: SunOS 5.8: suninstall Patch
• Sun Patch: SunOS 5.10_x86: ftp and in.ftpd patch
• Sun Patch: SunOS 5.10_x86: Sun GigaSwift Ethernet 1.0 driver patch
• Sun Patch: SunOS 5.9: Sun GigaSwift Ethernet 1.0 driver patch
• Sun Patch: SunOS 5.8: Sun GigaSwift Ethernet 1.0 driver patch
• IBM AIX: tooltalk_advisory (CVE-2010-0083): ToolTalk rpc.ttdbserver database parser vulnerability
• Sun Patch: SunOS 5.9: /usr/sbin/in.ftpd Patch
• Sun Patch: CDE 1.6_x86: ToolTalk RPC patch
• Sun Patch: SunOS 5.10: Resource Management User Interface Patch
• Sun Patch: SunOS 5.8: /usr/lib/nfs/nfslogd patch
• Sun Patch: SunOS 5.10_x86: Solaris Management Applications Patch
• Sun Patch: SunOS 5.9_x86: /usr/sbin/in.ftpd Patch
• Sun Patch: SunOS 5.9_x86: Resource Management User Interface Patch
• Sun Patch: SunOS 5.10_x86: Solaris kernel patch
• Sun Patch: SunOS 5.9_x86: Kernel Patch
• Sun Patch: SunOS 5.9: /usr/snadm/lib Library and Differential Flash Patch
• FreeBSD: FreeBSD -- Cross-site request forgery in ftpd(8) (FreeBSD-SA-08:12.ftpd) (CVE-2008-4247)
• Sun Patch: SunOS 5.10_x86: Flash Archive Patch