Intrusion Prevention

Oracle.Solaris.RPC.XDR.EBBISLAND.Code.Execution

Description

This indicates an attack attempt to exploit a remote Code Execution vulnerability in Sun Solaris that was disclosed by Shadow Broker as EBBISLAND exploit.
The vulnerability is caused by an error when the RDP service handles a malicious request. A remote attacker may be able to exploit this to gain control of vulnerable systems via a crafted client request.

Affected Products

Sun Solaris 6
Sun Solaris 7
Sun Solaris 8
Sun Solaris 9
Sun Solaris 10

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

CVE References

CVE-2017-3623