9.3

CVE-2008-0964

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Opensolaris Edition sparc
Sun ≫ Opensolaris Edition x86
Sun ≫ Opensolaris Version <= build_snv_95
Sun ≫ Opensolaris Version build_snv_01
Sun ≫ Opensolaris Version build_snv_02
Sun ≫ Opensolaris Version build_snv_13
Sun ≫ Opensolaris Version build_snv_19
Sun ≫ Opensolaris Version build_snv_22
Sun ≫ Opensolaris Version build_snv_64
Sun ≫ Opensolaris Version build_snv_88
Sun ≫ Opensolaris Version build_snv_89
Sun ≫ Opensolaris Version build_snv_91
Sun ≫ Opensolaris Version build_snv_92
Sun ≫ Solaris Version 8 Edition sparc
Sun ≫ Solaris Version 8 Edition x86
Sun ≫ Solaris Version 9 Edition sparc
Sun ≫ Solaris Version 9 Edition x86
Sun ≫ Solaris Version 10 Edition sparc
Sun ≫ Solaris Version 10 Edition x86
Sun ≫ Sunos Version 5.8
Sun ≫ Sunos Version 5.9
Sun ≫ Sunos Version 5.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 13.51% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734
http://secunia.com/advisories/31386
Vendor Advisory
http://secunia.com/advisories/31535
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
Vendor Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
http://www.securityfocus.com/bid/30556
http://www.securitytracker.com/id?1020633
http://www.vupen.com/english/advisories/2008/2311
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318
https://www.exploit-db.com/exploits/6328