Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2008-11-17 18:18
Updated : 2025-04-09 00:30
NVD link : CVE-2008-5099
Mitre link : CVE-2008-5099
CVE.ORG link : CVE-2008-5099
JSON object : View
Products Affected
sun
- logical_domain_manager
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor