PT-2011-1292 · Sun · Opensolaris+1

Published 2011-10-05 · Updated 2012-05-14 · CVE-2008-7300

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 39 through snv 67

Description The issue in the labeled networking implementation of Solaris Trusted Extensions allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy. This bypass enables access to the global zone when a labeled zone is in the installed state.

Recommendations For Sun Solaris version 10, there is no information about a newer version that contains a fix for this issue. For OpenSolaris versions snv 39 through snv 67, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-7300

Affected Products

Opensolaris

Sun Solaris

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-7300 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240099-1 · Vendor Advisory
• http://secunia.com/advisories/31412 · Vendor Advisory
• http://securityfocus.com/bid/30602 · Note