NVD

Id
2608  
Name
CVE-2008-2710  
Description
Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory. NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-16  
Modified Date
2011-03-07  
Seq
2008-2710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16358 2608 CVE-2008-2710 oval:org.mitre.oval:def:5731  View
16359 2608 CVE-2008-2710 237965  View
16360 2608 CVE-2008-2710 29699  View
16361 2608 CVE-2008-2710 1020283  View
16362 2608 CVE-2008-2710 http://www.trapkit.de/advisories/TKADV2008-003.txt  View
16363 2608 CVE-2008-2710 ADV-2008-1832  View
16364 2608 CVE-2008-2710 sun-solaris-ipsetsrcfilter-code-execution(43068)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46147 JVNDB-2008-001457 Sun Solaris の kernel の ip_set_srcfilter 関数における任意のコードを実行される脆弱性 Sun Solaris の kernel には uts/common/inet/ip/ip_multi.c の IP マルチキャストフィルタの ip_set_srcfilter 関数において、SIOCSIPMSFILTER IOCTL リクエストの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-2710 32823 CVE-2008-2710 2608 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001457.html 2008-06-12 2008-07-08 View