PT-2008-2573 · Sun · Snoop

Published 2008-08-08 · Updated 2018-10-30 · CVE-2008-0965

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions snoop versions on Sun Solaris 8 through 10 and OpenSolaris before snv 96

Description The issue is related to multiple format string vulnerabilities in snoop. These vulnerabilities can be exploited by remote attackers to execute arbitrary code via format string specifiers in an SMB packet when the -o option is omitted.

Recommendations For snoop on Sun Solaris 8 through 10 and OpenSolaris before snv 96, update to a version after snv 96 to resolve the issue. As a temporary workaround, consider using the -o option to minimize the risk of exploitation.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2008-0965

Affected Products

Snoop

References · 13

• http://secunia.com/advisories/31535 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1 · Vendor Advisory
• http://secunia.com/advisories/31386 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0965 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44222 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm · Note
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935 · Note
• http://securitytracker.com/id?1020633 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44415 · Note
• http://securityfocus.com/bid/30556 · Note