CVE-2008-4992
Estado: ModificadaMedia (4.6)—
The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:S/C:C/I:N/A:N
- Puntuación base: 4.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.31%
- Percentil entre todas las CVEs puntuadas: 21
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (13)
SUN — Blade T6300 ServerSUN — Blade T6320 ServerSUN — Fire Enterprise Server T1000SUN — Fire Enterprise Server T2000SUN — Netra Cp3060 ServerSUN — Netra T2000 ServerSUN — Netra T5220 ServerSUN — Sparc Enterprise Server T1000SUN — Sparc Enterprise Server T2000SUN — Sparc Enterprise Server T5120SUN — Sparc Enterprise Server T5140SUN — Sparc Enterprise Server T5220SUN — Sparc Enterprise Server T5240
CWE
- CWE-264
Referencias
- http://secunia.com/advisories/32582
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1
- http://www.securityfocus.com/bid/32143
- http://www.securitytracker.com/id?1021153
- http://www.vupen.com/english/advisories/2008/3047
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46407
- http://secunia.com/advisories/32582
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1
- http://www.securityfocus.com/bid/32143
- http://www.securitytracker.com/id?1021153
- http://www.vupen.com/english/advisories/2008/3047
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46407
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-4992",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.1,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-11-07T19:35:55.913",
"references": [
{
"url": "http://secunia.com/advisories/32582",
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/32143",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1021153",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/3047",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46407",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/32582",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/32143",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1021153",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/3047",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46407",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors."
},
{
"lang": "es",
"value": "El hipervisor SPARC en el Firmware de los procesadores de Sun System v6.6.3 hasta v6.6.5 y v7.1.3 hasta 7.1.3.e en UltraSPARC T1, T2 y T2+, permite a usarios del dominio lógico acceder a memoria en otros dominios lógicos a través de vectores desconocidos.\r\n"
}
],
"lastModified": "2026-06-16T22:58:54.330",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sun:blade_t6300_server:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09274149-E5C3-4FA5-A6D7-0F8332EDE98E"
},
{
"criteria": "cpe:2.3:h:sun:blade_t6300_server:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BB215F6-FEA1-442A-BFF7-7E74B9729367"
},
{
"criteria": "cpe:2.3:h:sun:blade_t6300_server:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D5EBB1C-542C-4182-B049-3086B0DF7C1C"
},
{
"criteria": "cpe:2.3:h:sun:blade_t6320_server:7.1.3d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FD2FB7F-3F0C-454C-A0A5-04045FA1C084"
},
{
"criteria": "cpe:2.3:h:sun:blade_t6320_server:7.1.3e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A0111CB-929E-426D-918C-B14A02C3B514"
},
{
"criteria": "cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCB92906-D2C4-452F-8D61-BEC2F1127308"
},
{
"criteria": "cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F834E71-F05A-4750-93BE-864F405A8788"
},
{
"criteria": "cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFB53493-49BB-49DB-838F-FDB03DDC15F5"
},
{
"criteria": "cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "350C2AA4-3E0A-46FB-8F29-83BCB55FB40E"
},
{
"criteria": "cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83796305-BFFB-44E7-B2EE-A7F4BCAEDF7F"
},
{
"criteria": "cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DF05F11-04AA-49B0-97FF-89727C5C1774"
},
{
"criteria": "cpe:2.3:h:sun:netra_cp3060_server:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F9A986F-EF61-4660-A262-0FCCC6EAB5EF"
},
{
"criteria": "cpe:2.3:h:sun:netra_cp3060_server:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1489449A-0BFD-4CAD-A75A-2010E091F9EC"
},
{
"criteria": "cpe:2.3:h:sun:netra_cp3060_server:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07133D15-CE61-417E-A2A0-175847CB42F3"
},
{
"criteria": "cpe:2.3:h:sun:netra_t2000_server:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13D5B743-7ADB-40E9-AEF5-980E57F2BEA7"
},
{
"criteria": "cpe:2.3:h:sun:netra_t2000_server:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4C51203-47DF-4BE9-8A1E-28EB8D0EA487"
},
{
"criteria": "cpe:2.3:h:sun:netra_t2000_server:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FF99272-0DED-4F63-A8E1-23CE9EC389C9"
},
{
"criteria": "cpe:2.3:h:sun:netra_t5220_server:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC5A92D1-1B30-4718-A79E-5C4691AAF74C"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA8D2A77-41DB-4A32-A587-57F3013602EC"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51C17E7B-B9D6-427A-92E8-87089EA09846"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2DC7257-391C-451B-9F4F-E12D444DF517"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "891F5592-9F99-4A9E-81A6-C9FE8D46EDA0"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA3D4854-DFEA-4947-B51A-EA72CD1A06D9"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D914F5E-B90C-4206-8AB2-03792E6249B5"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5120:7.1.3e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2019E6C1-53D6-41E7-85CA-012B7A79EC9F"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5140:7.1.3d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C09A7A0-BE8F-4AF6-8DF2-219C001DCEE0"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5140:7.1.3e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E879A103-9DFF-4004-91BE-EDA090FFAE70"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5220:7.1.3d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37E81317-3D15-4D2C-8A6F-AC3F8D093CA3"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5220:7.1.3e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "725F9305-2926-4CD0-9320-0DBF6AA47454"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5240:7.1.3d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37CD18A8-41D5-4804-AF66-D81FDBB9EB47"
},
{
"criteria": "cpe:2.3:h:sun:sparc_enterprise_server_t5240:7.1.3e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07FA5F7C-FC11-4A69-A067-53EF2A76CE79"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}