PT-2008-6162 · Sun · Ultrasparc T2+3

Published 2008-11-07 · Updated 2017-08-08 · CVE-2008-4992

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun System Firmware versions 6.6.3 through 6.6.5 Sun System Firmware versions 7.1.3 through 7.1.3.e

Description The issue allows logical domain users to access memory in other logical domains. This is a problem related to the SPARC hypervisor in Sun System Firmware on UltraSPARC T1, T2, and T2+ processors.

Recommendations For Sun System Firmware versions 6.6.3 through 6.6.5, update to a version outside of this range to resolve the issue. For Sun System Firmware versions 7.1.3 through 7.1.3.e, update to a version outside of this range to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-4992

Affected Products

Sparc

Sun System Firmware

Ultrasparc T1

Ultrasparc T2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-4992 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1 · Vendor Advisory
• http://vupen.com/english/advisories/2008/3047 · Note
• http://secunia.com/advisories/32582 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46407 · Note
• http://securityfocus.com/bid/32143 · Note
• http://securitytracker.com/id?1021153 · Note