PT-2008-3318 · Oracle · Solaris 10 Trusted Extensions

Published 2008-04-14 · Updated 2017-08-08 · CVE-2008-1780

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Solaris 10 Trusted Extensions (affected versions not specified)

Description The issue concerns an unspecified vulnerability in the labeled networking functionality. This vulnerability allows applications in separate labeling zones to bypass labeling restrictions. The exact vectors used for the bypass are unknown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-1780

Affected Products

Solaris 10 Trusted Extensions

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-1780 · Security Note
• http://secunia.com/advisories/29730 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-235421-1 · Vendor Advisory
• http://securityfocus.com/bid/28734 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41764 · Note
• http://vupen.com/english/advisories/2008/1194/references · Note
• http://securitytracker.com/id?1019832 · Note