PT-2008-5181 · Sun · Opensolaris+1

Published 2008-08-27 · Updated 2017-08-08 · CVE-2008-3838

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions prior to snv 88 OpenSolaris versions prior to snv 88

Description The issue affects the NFS Remote Procedure Calls (RPC) zones implementation, allowing local administrators of non-global zones to potentially read and modify NFS traffic for arbitrary non-global zones. This could lead to file modifications or a denial of service.

Recommendations For Sun Solaris versions prior to snv 88, update to a version after snv 88 to resolve the issue. For OpenSolaris versions prior to snv 88, update to a version after snv 88 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-3838

Affected Products

Opensolaris

Sun Solaris

References · 7

• http://securityfocus.com/bid/30853 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-3838 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240866-1 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2441 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44696 · Note
• http://secunia.com/advisories/31622 · Note
• http://securitytracker.com/id?1020752 · Note