Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2004-1355: Sun Solaris 8/9 local user can crash system

CVE-2004-1355 · published 22 years ago

Summary

The TCP/IP networking component in Sun Solaris versions 8 and 9 can be triggered by someone with local access to make the operating system stop working unexpectedly. This could cause the server to restart or become unavailable, interrupting business operations. Apply any available patches from Sun or upgrade to a newer, supported version of Solaris to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sun	solaris	All versions `cpe:2.3:o:sun:solaris::::::::`
sun	sunos	5.9 `cpe:2.3:o:sun:sunos:5.9:::::::*`

Original advisory text

Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

References

http://secunia.com/advisories/11483/ Patch Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57545-1&searchclause=%2... Patch Vendor Advisory
http://www.auscert.org.au/render.html?it=4057 Patch Vendor Advisory
http://www.osvdb.org/displayvuln.php?osvdb_id=5665 Patch
http://www.securityfocus.com/bid/10216 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15955
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

2.1 Low

Exploitation

<1% chance of attack within 30 days

Timeline

Published26 Apr 2004

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2004-1355 · NVD

Track software like this

Free during beta