Vulnerability Name:

CVE-2008-3875 (CCN-44753)

Assigned:2008-08-28
Published:2008-08-28
Updated:2017-09-29
Summary:The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls.
CVSS v3 Severity:5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-264
Vulnerability Consequences:Bypass Security
References:Source: MITRE
Type: CNA
CVE-2008-3875

Source: CCN
Type: SA31667
Sun Solaris Kernel Covert Channel Security Bypass

Source: SECUNIA
Type: UNKNOWN
31667

Source: CCN
Type: SECTRACK ID: 1020780
Solaris Kernel Lets Local Users Establish Covert Channels

Source: SUNALERT
Type: UNKNOWN
240706

Source: CCN
Type: Sun Alert ID: 240706
Covert Channel Security Vulnerability in the Solaris Kernel

Source: CCN
Type: OSVDB ID: 47857
Solaris Kernel Covert Channel Security Restriction Bypass

Source: BID
Type: Patch
30880

Source: CCN
Type: BID-30880
Sun Solaris Kernel Covert Channel Creation Security Bypass Vulnerability

Source: SECTRACK
Type: UNKNOWN
1020780

Source: VUPEN
Type: UNKNOWN
ADV-2008-2460

Source: XF
Type: UNKNOWN
solaris-kernel-security-bypass(44753)

Source: XF
Type: UNKNOWN
solaris-kernel-security-bypass(44753)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:5453

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_39:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_47:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79b:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:*:*:*:*:*:*:*:* (Version <= build_snv_89)
  • OR cpe:/o:sun:solaris:8:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:solaris:8::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_01::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_02::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_13::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_19::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_22::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_39::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_01::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_02::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_13::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_19::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_22::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_39::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_64::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_68::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_36::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_36::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_67::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_59::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_68::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*
  • AND
  • cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:5453
    V
    		Covert Channel Security Vulnerability in the Solaris Kernel
    2008-10-20
    BACK
    sun opensolaris build_snv_01
    sun opensolaris build_snv_02
    sun opensolaris build_snv_13
    sun opensolaris build_snv_19
    sun opensolaris build_snv_22
    sun opensolaris build_snv_39
    sun opensolaris build_snv_47
    sun opensolaris build_snv_59
    sun opensolaris build_snv_64
    sun opensolaris build_snv_79b
    sun opensolaris build_snv_87
    sun opensolaris build_snv_88
    sun opensolaris *
    sun solaris 8
    sun solaris 8
    sun solaris 9
    sun solaris 9
    sun solaris 10
    sun solaris 10
    sun solaris 8
    sun solaris 8
    sun solaris 9
    sun solaris 10
    sun solaris 10
    sun opensolaris build_snv_89
    sun opensolaris build_snv_89
    sun solaris 9
    sun opensolaris build_snv_01
    sun opensolaris build_snv_02
    sun opensolaris build_snv_13
    sun opensolaris build_snv_19
    sun opensolaris build_snv_22
    sun opensolaris build_snv_39
    sun opensolaris build_snv_64
    sun opensolaris build_snv_88
    sun opensolaris build_snv_01
    sun opensolaris build_snv_02
    sun opensolaris build_snv_13
    sun opensolaris build_snv_19
    sun opensolaris build_snv_22
    sun opensolaris build_snv_39
    sun opensolaris build_snv_64
    sun opensolaris build_snv_88
    sun opensolaris build_snv_59
    sun opensolaris build_snv_68
    sun opensolaris build_snv_36
    sun opensolaris build_snv_67
    sun opensolaris build_snv_36
    sun opensolaris build_snv_67
    sun opensolaris build_snv_59
    sun opensolaris build_snv_68
    sun opensolaris build_snv_87
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_85