CVE-2008-0964

Published: Aug 8, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.

Affected (23)

Products: Sun: Opensolaris, Solaris, Sunos

3 products

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Sun Opensolaris	All versions
Sun Opensolaris	Up to build_snv_95
Sun Opensolaris	All versions
Sun Opensolaris	All versions
Sun Opensolaris	Version build_snv_01
Sun Opensolaris	Version build_snv_02
Sun Opensolaris	Version build_snv_13
Sun Opensolaris	Version build_snv_19
Sun Opensolaris	Version build_snv_22
Sun Opensolaris	Version build_snv_64
Sun Opensolaris	Version build_snv_88
Sun Opensolaris	Version build_snv_89
Sun Opensolaris	Version build_snv_91
Sun Opensolaris	Version build_snv_92
Sun Solaris	Version 10
Sun Solaris	Version 10
Sun Solaris	Version 8
Sun Solaris	Version 8
Sun Solaris	Version 9
Sun Solaris	Version 9
Sun Sunos	Version 5.10
Sun Sunos	Version 5.8
Sun Sunos	Version 5.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734

Source: cve@mitre.org

http://secunia.com/advisories/31386

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31535

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1

Source: cve@mitre.org

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm

Source: cve@mitre.org

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935

Source: cve@mitre.org

http://www.securityfocus.com/bid/30556

Source: cve@mitre.org

http://www.securitytracker.com/id?1020633

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2311

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/44222

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6328

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31386

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/31535

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30556

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020633

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2311

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/44222

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/6328

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.