PT-2008-5182 · Sun · Opensolaris+1

Published 2008-08-27 · Updated 2017-08-08 · CVE-2008-3839

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 59 through snv 87

Description The issue is related to an unspecified vulnerability in the NFS module in the kernel. It affects systems configured as an NFS server without the nodevices option, allowing local users to cause a denial of service (panic) via unspecified vectors.

Recommendations For Sun Solaris 10, consider configuring the NFS server with the nodevices option to prevent local users from causing a denial of service. For OpenSolaris versions snv 59 through snv 87, consider configuring the NFS server with the nodevices option to prevent local users from causing a denial of service.

Fix

Related Identifiers

CVE-2008-3839

Affected Products

Opensolaris

Sun Solaris

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-3839 · Security Note
• http://secunia.com/advisories/31598 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-241066-1 · Vendor Advisory
• http://securityfocus.com/bid/30810 · Note
• http://vupen.com/english/advisories/2008/2425 · Note
• http://securitytracker.com/id?1020751 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2008-369.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44631 · Note