CVE-2008-4619
Sun Solaris 9 - Denial of Service via RPC XDR_DECODE Operation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4619. PoCs published by Federico L. Bossi Bonin.
AI-analyzed exploit summary This exploit triggers a segmentation fault in Solaris 9's `taddr2uaddr()` function via a malformed XDR-encoded RPC call, causing a remote denial-of-service (DoS). The PoC sends a crafted RPC request to the portmapper service (program 100000, version 4) with an empty string argument, leading to a crash in `__inet_taddr2uaddr()`.
Description
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165.
Exploits (1)
This exploit triggers a segmentation fault in Solaris 9's `taddr2uaddr()` function via a malformed XDR-encoded RPC call, causing a remote denial-of-service (DoS). The PoC sends a crafted RPC request to the portmapper service (program 100000, version 4) with an empty string argument, leading to a crash in `__inet_taddr2uaddr()`.