« Volver al listado

CVE-2008-7300

Estado: ModificadaAlta (8.5)—

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

SUN — OpensolarisSUN — Sunos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-7300",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-10-05T02:56:24.473",
  "references": [
    {
      "url": "http://secunia.com/advisories/31412",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-240099-1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/30602",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31412",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-240099-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/30602",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone."
    },
    {
      "lang": "es",
      "value": "La implementación del enrutado etiquetado (\"labeled networking\") de Solaris Trusted Extensions de Sun Solaris 10 y OpenSolaris snv_39 hasta la snv_67, si una zona etiquetada se encuentra en el estado \"installed\", permite a usuarios autenticados remotos evitar la política MAC (Mandatory Access Control) y obtener acceso a la zona global."
    }
  ],
  "lastModified": "2026-06-16T23:04:01.343",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F44E7B9-1441-474D-9DB8-EAD37F79B3D2"
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_47:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B633EB48-E66F-4077-9951-31B19B629CE4"
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_59:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1D97BFB-F05B-487E-8AE8-BE73FDD92FCC"
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E8BFE03-135B-4E3E-B993-7C37C0EF2286"
            },
            {
              "criteria": "cpe:2.3:o:sun:opensolaris:build_snv_67:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42271360-2ACC-413E-BAEB-DCF259432E22"
            },
            {
              "criteria": "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}