Vulnerability Name:

CVE-2008-3839 (CCN-44631)

Assigned:2008-08-22
Published:2008-08-22
Updated:2017-08-08
Summary:Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.7 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C)
3.5 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2008-3839

Source: CCN
Type: SA31598
Sun Solaris NFS Kernel Module Denial of Service

Source: SECUNIA
Type: Vendor Advisory
31598

Source: CCN
Type: SECTRACK ID: 1020751
Solaris NFS Kernel Module spec_fsync() Bug Lets Local Users Deny Service

Source: SUNALERT
Type: UNKNOWN
241066

Source: CCN
Type: Sun Alert ID: 241066
A Security Vulnerability in the Solaris NFS Kernel Module May Lead to a System Panic, Resulting in a Denial of Service (DoS)

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2008-369.htm

Source: CCN
Type: ASA-2008-369
A Security Vulnerability in the Solaris NFS Kernel Module May Lead to a System Panic Resulting in a Denial of Service (DoS) (Sun 241066)

Source: CCN
Type: OSVDB ID: 47765
Solaris NFS Kernel Module Unspecified Local DoS

Source: BID
Type: UNKNOWN
30810

Source: CCN
Type: BID-30810
Sun Solaris NFS Kernel Module Local Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1020751

Source: VUPEN
Type: UNKNOWN
ADV-2008-2425

Source: XF
Type: UNKNOWN
solaris-nfs-dos(44631)

Source: XF
Type: UNKNOWN
solaris-nfs-dos(44631)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:*:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:*:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_59:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_60:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_61:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_62:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_63:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_64:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_65:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_66:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_67:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:*:*:sparc:*:*:*:*:* (Version <= snv_87)
  • OR cpe:/o:sun:opensolaris:*:*:x86:*:*:*:*:* (Version <= snv_87)
  • OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun opensolaris *
    sun opensolaris *
    sun opensolaris snv_59
    sun opensolaris snv_59
    sun opensolaris snv_59
    sun opensolaris snv_60
    sun opensolaris snv_60
    sun opensolaris snv_60
    sun opensolaris snv_61
    sun opensolaris snv_61
    sun opensolaris snv_61
    sun opensolaris snv_62
    sun opensolaris snv_62
    sun opensolaris snv_62
    sun opensolaris snv_63
    sun opensolaris snv_63
    sun opensolaris snv_63
    sun opensolaris snv_64
    sun opensolaris snv_64
    sun opensolaris snv_64
    sun opensolaris snv_65
    sun opensolaris snv_65
    sun opensolaris snv_65
    sun opensolaris snv_66
    sun opensolaris snv_66
    sun opensolaris snv_66
    sun opensolaris snv_67
    sun opensolaris snv_67
    sun opensolaris snv_67
    sun opensolaris snv_68
    sun opensolaris snv_68
    sun opensolaris snv_68
    sun opensolaris snv_69
    sun opensolaris snv_69
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_70
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_71
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_72
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_73
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_74
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_75
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_76
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_77
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_78
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_79
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_80
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_81
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_82
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_83
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_84
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_85
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_86
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris *
    sun opensolaris *
    sun solaris 10
    sun solaris 10
    sun solaris 10
    sun solaris 10
    sun opensolaris build_snv_64
    sun opensolaris build_snv_64
    sun opensolaris build_snv_59
    sun opensolaris build_snv_87
    sun opensolaris build_snv_67
    sun opensolaris build_snv_79
    sun opensolaris build_snv_67
    sun opensolaris build_snv_59
    sun opensolaris build_snv_79
    sun opensolaris build_snv_87