PT-2008-3996 · Sun · Sun Cluster+2

Published 2008-06-03 · Updated 2017-08-08 · CVE-2008-2539

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Cluster versions 3.1 on Sun Solaris 8 through 10

Description The issue affects the Sun Cluster Global File System, potentially allowing local users to read data from arbitrary deleted files or corrupt files in global filesystems when an underlying ufs filesystem is used.

Recommendations For Sun Cluster version 3.1 on Sun Solaris 8 through 10, consider restricting access to the global filesystems to minimize the risk of exploitation until a fix is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-2539

Affected Products

Sun Cluster

Sun Solaris

Ufs

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-2539 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-201341-1 · Vendor Advisory
• http://secunia.com/advisories/30483 · Vendor Advisory
• http://securityfocus.com/bid/29458 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42762 · Note
• http://vupen.com/english/advisories/2008/1713 · Note
• http://securitytracker.com/id?1020152 · Note