FKIE_CVE-2008-3875

Vulnerability from fkie_nvd - Published: 2008-09-02 14:24 - Updated: 2026-06-16 22:56
Severity
Summary
The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls.
References
cve@mitre.orghttp://secunia.com/advisories/31667
cve@mitre.orghttp://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1
cve@mitre.orghttp://www.securityfocus.com/bid/30880Patch
cve@mitre.orghttp://www.securitytracker.com/id?1020780
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/2460
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/44753
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/31667
af854a3a-2127-422b-91ae-364da2661108http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/30880Patch
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1020780
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/2460
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/44753
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453
Impacted products
Vendor Product Version
sun opensolaris *
sun opensolaris build_snv_01
sun opensolaris build_snv_02
sun opensolaris build_snv_13
sun opensolaris build_snv_19
sun opensolaris build_snv_22
sun opensolaris build_snv_39
sun opensolaris build_snv_47
sun opensolaris build_snv_59
sun opensolaris build_snv_64
sun opensolaris build_snv_79b
sun opensolaris build_snv_87
sun opensolaris build_snv_88
sun solaris 8
sun solaris 8
sun solaris 9
sun solaris 9
sun solaris 10
sun solaris 10
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9E5D517-7116-44E7-8A1E-470D206DE281",
              "versionEndIncluding": "build_snv_89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*",
              "matchCriteriaId": "65C717D1-2192-415E-AF6F-7F9619A3C98A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*",
              "matchCriteriaId": "56451D1E-E5F2-473E-8995-94890AD72685",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*",
              "matchCriteriaId": "10F2BBC6-DF15-4DEF-AACF-6F570A23733C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*",
              "matchCriteriaId": "32C315C7-9204-40DB-9730-4138069679CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*",
              "matchCriteriaId": "A19A54E9-403E-4051-A120-D588BE399F4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_39:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F44E7B9-1441-474D-9DB8-EAD37F79B3D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_47:*:*:*:*:*:*:*",
              "matchCriteriaId": "B633EB48-E66F-4077-9951-31B19B629CE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_59:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1D97BFB-F05B-487E-8AE8-BE73FDD92FCC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E8BFE03-135B-4E3E-B993-7C37C0EF2286",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_79b:*:*:*:*:*:*:*",
              "matchCriteriaId": "4EDBBB71-6159-409F-B2D8-9341BA599409",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_87:*:*:*:*:*:*:*",
              "matchCriteriaId": "A13C5C92-C568-4083-A9BA-46992CBC8A79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*",
              "matchCriteriaId": "86003B47-A3DF-4119-85ED-FEEAB4F4F034",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
              "matchCriteriaId": "6DBDFD8C-371E-42D2-9635-D8CDD1775984",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
              "matchCriteriaId": "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
              "matchCriteriaId": "14CFA6D3-A611-4DF0-97AB-C30B79833DFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
              "matchCriteriaId": "F2F5901D-AB91-4F12-BF08-0BC3797833E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
              "matchCriteriaId": "7FBA68F0-4577-46F5-A754-D365B6EFF872",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
              "matchCriteriaId": "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls."
    },
    {
      "lang": "es",
      "value": "El n\u00facleo de Sun Solaris 8 hasta 10 y OpenSolaris anterior a snv_90, permite a usuarios locales evitar chroot, zones y la pol\u00edtica de seguridad multi nivel de Solaris Trusted Extensions, y establecer un canal de comunicaci\u00f3n encubierto, a trav\u00e9s de vectores no especificados que incluyen llamadas al sistema."
    }
  ],
  "id": "CVE-2008-3875",
  "lastModified": "2026-06-16T22:56:43.213",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-09-02T14:24:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/31667"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/30880"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1020780"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/2460"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44753"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/31667"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/30880"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1020780"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/2460"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44753"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.