CVE-2009-0267: libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allo...

Security readout for executives and security teams

This is an old Solaris denial-of-service flaw in the IKE component. A remote attacker could send an unspecified malformed IKE packet and crash the in.iked daemon, disrupting IPsec/IKE-dependent services. The provided sources do not give CVSS details or evidence of active exploitation. Exposure is limited to environments still running affected Solaris or OpenSolaris versions with IKE/in.iked reachable. It matters most for legacy systems supporting IPsec or network security functions. Modern estates without these platforms are unlikely to be affected. Handle as legacy infrastructure risk. It is not a confirmed active-exploitation emergency, but a remotely triggerable crash on network security services can cause outages where affected Solaris systems remain in production. Mitigation focus: Identify Solaris 9, Solaris 10, and OpenSolaris systems before snv_100.; Review the Sun/Oracle advisory and apply the vendor-listed patch or upgrade path.; Restrict network reachability to IKE services where business requirements allow..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.