CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
13.2%
The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls.
Vendor | Product | Version | CPE |
---|---|---|---|
sun | opensolaris | * | cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_01 | cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_02 | cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_13 | cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_19 | cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_22 | cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_39 | cpe:2.3:o:sun:opensolaris:build_snv_39:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_47 | cpe:2.3:o:sun:opensolaris:build_snv_47:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_59 | cpe:2.3:o:sun:opensolaris:build_snv_59:*:*:*:*:*:*:* |
sun | opensolaris | build_snv_64 | cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:* |
secunia.com/advisories/31667
sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1
www.securityfocus.com/bid/30880
www.securitytracker.com/id?1020780
www.vupen.com/english/advisories/2008/2460
exchange.xforce.ibmcloud.com/vulnerabilities/44753
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453