Solaris 10/11 Telnet Exploit

I'm not going to repeat what others have already said regarding the telnet+login vulnerability, other than:

If you are running telnet, and it's internet facing, then you have much more fundamental network security problems to workout.

Solaris 10 Ping-of-Death

Once again, proof that "oldie-but-goodie" attacks (to quote Ed Skoudis) are still prevalent, and, scarier yet, still EFFECTIVE, ISC announced that there is a Ping-of-Death attack that will cause a kernel panic on Solaris 10. As of right now, there's not much info, you can read more over at ISC.

The obvious mitigation is to filter ping (ICMP echo-request) at your border router/firewall. There isn't much need to allow ping into your network.

Enjoy.