NVD Vulnerability Detail
Search Exploit, PoC
CVE-2008-3875
Summary

The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls.

Publication Date Sept. 2, 2008, 11:24 p.m.
Registration Date Jan. 29, 2021, 1:41 p.m.
Last Update Sept. 29, 2017, 10:31 a.m.
CVSS2.0 : HIGH
Score 7.2
Vector AV:L/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV) ローカル
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) 高
完全性への影響(I) 高
可用性への影響(A) 高
Get all privileges. はい
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_39:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_47:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_59:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_79b:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_87:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*
cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:* build_snv_89
cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*
cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*
cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List