Nortel Response to Sun Alert 200864 - Solaris DoS Under a TCP "SYN Flood" Attack
| Description: |
Sun Microsystems has recently issued Sun Alert 200864 - Security Vulnerability in the TCP Implementation of Solaris Systems May Allow a Denial of Service When Accepting New Connections While Undergoing a TCP "SYN Flood" Attack. Some Nortel products contain this software as a component and thus are potentially affected by the vulnerabilities addressed. This bulletin provides a multi-product consolidated response for the Nortel products which are potentially affected. Sun Alert 200864 (http://sunsolve.sun.com/search/document.do?assetkey=1-66-200864-1) This bulletin addresses the following potential vulnerability: 1. CVE-2008-2121 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2121) The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack. Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories |
| Type: |
Security Advisories |
| Number: |
2008008915, Rev 1 |
| Status: |
Retired |
| Date: |
2009-01-09 |
