PT-2008-5181 · Sun · Opensolaris+1

Publicado 2008-08-27 · Atualizado 2017-08-08 · CVE-2008-3838

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions prior to snv 88 OpenSolaris versions prior to snv 88

Description The issue affects the NFS Remote Procedure Calls (RPC) zones implementation, allowing local administrators of non-global zones to potentially read and modify NFS traffic for arbitrary non-global zones. This could lead to file modifications or a denial of service.

Recommendations For Sun Solaris versions prior to snv 88, update to a version after snv 88 to resolve the issue. For OpenSolaris versions prior to snv 88, update to a version after snv 88 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-3838

Produtos afetados

Opensolaris

Sun Solaris

Referências · 7

• http://vupen.com/english/advisories/2008/2441 · Nota
• http://securityfocus.com/bid/30853 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2008-3838 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44696 · Nota
• http://secunia.com/advisories/31622 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240866-1 · Aviso do Fabricante
• http://securitytracker.com/id?1020752 · Nota