CVE:CVE-2008-2946
CNNVD:CNNVD-200806-433
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。
运行在Solaris上的Sun Solstice企业SNMP-DMI映射器子代理守护程序(snmpXdmid(1M))中的安全漏洞可能允许本地或远程非特权用户通过发送畸形报文杀死守护程序进程。如果出现了上述漏洞，snmpXdmid会core dump，core文件的pstack输出类似于：
core 'core' of 362:     /usr/lib/dmi/snmpXdmid -s <hostname>
-----------------  lwp# 2 / thread# 2  --------------------
00025cd8 handle_CompLangGrpIndication (7, fef7bde8, 44448, fef7bde8, 
b0be0, 20) ++ dc
00024de0 _dmicomponentadded_0x1_svc (fef7bde8, 49bd0, fef7bde8, 
fffffff8, 0,   +fef7be11) + 8
000250d0 dmi2_client_0x1 (49bd0, b3e68, 1, 0, 74637000, 74637000) + 1dc 
ff1d15ec _svc_prog_dispatch (b3e68, b0c58, 49bd0, 4ede4, ff1d12e4, 0) + 180
ff1d1398 svc_getreq_common (8, 0, 8, 4ede4, ff1d1240, bab68) + d4
ff1d12a4 svc_getreq_poll (bab68, 1, ffffffff, 4, 0, bab68) + c4
00024da0 waitForIndication (0, 0, 0, 0, 0, 0) + 98
ff295c94 _lwp_start (0, 0, 0, 0, 0, 0)
-----------------  lwp# 1 / thread# 1  --------------------
00018d08 main     (0, 31f2c, 31f84, 47800, 0, 0) + 2ec
000189d8 _start   (0, 0, 0, 0, 0, 0) + 108
solution:Upgrade sun solaris to a higher version than 8,9,10,and avoid the version 8,9,10; Upgrade sun sunos to a higher version than 5.8,5.9,5.10,and avoid the version 5.8,5.9,5.10