CVE-2008-4992

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-4992
The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors.

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:S/C:C/I:N/A:N

Exploitability : 3.1 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/32582
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1 Patch Vendor Advisory
http://www.securityfocus.com/bid/32143
http://www.securitytracker.com/id?1021153
http://www.vupen.com/english/advisories/2008/3047
https://exchange.xforce.ibmcloud.com/vulnerabilities/46407
http://secunia.com/advisories/32582
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1 Patch Vendor Advisory
http://www.securityfocus.com/bid/32143
http://www.securitytracker.com/id?1021153
http://www.vupen.com/english/advisories/2008/3047
https://exchange.xforce.ibmcloud.com/vulnerabilities/46407
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:sun:blade_t6300_server:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_t6300_server:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_t6300_server:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_t6320_server:7.1.3d:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_t6320_server:7.1.3e:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_cp3060_server:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_cp3060_server:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_cp3060_server:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_t2000_server:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_t2000_server:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_t2000_server:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_t5220_server:7.1.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.3:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.4:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.5:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5120:7.1.3e:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5140:7.1.3d:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5140:7.1.3e:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5220:7.1.3d:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5220:7.1.3e:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5240:7.1.3d:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5240:7.1.3e:*:*:*:*:*:*:*
History

No history.

Information

Published : 2008-11-07 19:35

Updated : 2025-04-09 00:30

NVD link : CVE-2008-4992

Mitre link : CVE-2008-4992

CVE.ORG link : CVE-2008-4992

JSON object : View

Products Affected

sun

  • netra_t5220_server
  • sparc_enterprise_server_t5240
  • sparc_enterprise_server_t5140
  • fire_enterprise_server_t2000
  • sparc_enterprise_server_t1000
  • blade_t6320_server
  • sparc_enterprise_server_t5220
  • sparc_enterprise_server_t5120
  • fire_enterprise_server_t1000
  • netra_t2000_server
  • blade_t6300_server
  • sparc_enterprise_server_t2000
  • netra_cp3060_server
CWE
CWE-264

Permissions, Privileges, and Access Controls