PT-2008-4155 · Sun · Opensolaris+1

Tobias Klein · Publicado 2008-06-16 · Atualizado 2018-10-30 · CVE-2008-2710

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris 10 and OpenSolaris before snv 92

Description The issue is caused by an integer signedness error in the ip set srcfilter function in the IP Multicast Filter. This error allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf numsrc field. The error triggers an out-of-bounds write of kernel memory.

Recommendations For Sun Solaris 10 and OpenSolaris before snv 92, consider restricting access to the SIOCSIPMSFILTER IOCTL request to minimize the risk of exploitation. As a temporary workaround, limit the value of the imsf numsrc field to prevent out-of-bounds writes. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-2710

Produtos afetados

Opensolaris

Sun Solaris 10

Referências · 9

• 🔥 http://trapkit.de/advisories/TKADV2008-003.txt · Exploit
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-237965-1 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5731 · Nota
• http://secunia.com/advisories/30693 · Nota
• http://securityfocus.com/bid/29699 · Nota
• http://vupen.com/english/advisories/2008/1832/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2710 · Nota de Segurança
• http://securitytracker.com/id?1020283 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43068 · Nota