PT-2008-4925 · Sun · Sun Solaris+1

Published 2008-08-07 · Updated 2017-09-29 · CVE-2008-3549

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions prior to snv 90 OpenSolaris versions prior to snv 90

Description The issue is related to an unspecified vulnerability in the pthread mutex reltimedlock np API, which can be exploited by local users to cause a denial of service, resulting in a system hang or panic. The exact vectors used for the exploitation are not specified.

Recommendations For Sun Solaris versions prior to snv 90, update to a version after snv 90. For OpenSolaris versions prior to snv 90, update to a version after snv 90.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-3549

Affected Products

Opensolaris

Sun Solaris

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-3549 · Security Note
• http://secunia.com/advisories/31348 · Vendor Advisory
• http://securityfocus.com/bid/30561 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5446 · Note
• http://vupen.com/english/advisories/2008/2312 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44224 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-239387-1 · Patch, Vendor Advisory
• http://securitytracker.com/id?1020634 · Note