CVE-2008-5689

tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference.

• sun opensolaris snv 01 • sun opensolaris snv 02 • sun opensolaris snv 03 • sun opensolaris snv 04 • sun opensolaris snv 05 • sun opensolaris snv 06 • sun opensolaris snv 07 • sun opensolaris snv 08 • sun opensolaris snv 09 • sun opensolaris snv 10 • sun opensolaris snv 11 • sun opensolaris snv 12 • sun opensolaris snv 13 • sun opensolaris snv 14 • sun opensolaris snv 15 • sun opensolaris snv 16 • sun opensolaris snv 17 • sun opensolaris snv 18 • sun opensolaris snv 19 • sun opensolaris snv 20 • sun opensolaris snv 21 • sun opensolaris snv 22 • sun opensolaris snv 23 • sun opensolaris snv 24 • sun opensolaris snv 25 • sun opensolaris snv 26 • sun opensolaris snv 27 • sun opensolaris snv 28 • sun opensolaris snv 29 • sun opensolaris snv 30 • sun opensolaris snv 31 • sun opensolaris snv 32 • sun opensolaris snv 33 • sun opensolaris snv 34 • sun opensolaris snv 35 • sun opensolaris snv 36 • sun opensolaris snv 37 • sun opensolaris snv 38 • sun opensolaris snv 39 • sun opensolaris snv 40 • sun opensolaris snv 41 • sun opensolaris snv 42 • sun opensolaris snv 43 • sun opensolaris snv 44 • sun opensolaris snv 45 • sun opensolaris snv 46 • sun opensolaris snv 47 • sun opensolaris snv 48 • sun opensolaris snv 49 • sun opensolaris snv 50 • sun opensolaris snv 51 • sun opensolaris snv 52 • sun opensolaris snv 53 • sun opensolaris snv 54 • sun opensolaris snv 55 • sun opensolaris snv 56 • sun opensolaris snv 57 • sun opensolaris snv 58 • sun opensolaris snv 59 • sun opensolaris snv 60 … and 20 more