MEDIUM · 4.0

CVE-2003-1563

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listeni...

Vulnerability Description

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.

CVSS Score

4.0

MEDIUM

AV:L/AC:H/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
SunSolaris2.6
SunSunos5.8
SunCluster2.2

References

FAQ

What is CVE-2003-1563?

CVE-2003-1563 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listeni...

How severe is CVE-2003-1563?

CVE-2003-1563 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-1563?

Check the references section above for vendor advisories and patch information. Affected products include: Sun Solaris, Sun Sunos, Sun Cluster.