CVE-2008-5689 tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL reque...
HighCVSS 7.2
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun opensolaris | = snv_01 | No fix listed |
| sun opensolaris | = snv_02 | No fix listed |
| sun opensolaris | = snv_03 | No fix listed |
| sun opensolaris | = snv_04 | No fix listed |
| sun opensolaris | = snv_05 | No fix listed |
| sun opensolaris | = snv_06 | No fix listed |
| sun opensolaris | = snv_07 | No fix listed |
| sun opensolaris | = snv_08 | No fix listed |
| sun opensolaris | = snv_09 | No fix listed |
| sun opensolaris | = snv_10 | No fix listed |
| sun opensolaris | = snv_11 | No fix listed |
| sun opensolaris | = snv_12 | No fix listed |
| sun opensolaris | = snv_13 | No fix listed |
| sun opensolaris | = snv_14 | No fix listed |
| sun opensolaris | = snv_15 | No fix listed |
| sun opensolaris | = snv_16 | No fix listed |
| sun opensolaris | = snv_17 | No fix listed |
| sun opensolaris | = snv_18 | No fix listed |
| sun opensolaris | = snv_19 | No fix listed |
| sun opensolaris | = snv_20 | No fix listed |
| sun opensolaris | = snv_21 | No fix listed |
| sun opensolaris | = snv_22 | No fix listed |
| sun opensolaris | = snv_23 | No fix listed |
| sun opensolaris | = snv_24 | No fix listed |
| sun opensolaris | = snv_25 | No fix listed |
Show 55 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun opensolaris | = snv_26 | No fix listed |
| sun opensolaris | = snv_27 | No fix listed |
| sun opensolaris | = snv_28 | No fix listed |
| sun opensolaris | = snv_29 | No fix listed |
| sun opensolaris | = snv_30 | No fix listed |
| sun opensolaris | = snv_31 | No fix listed |
| sun opensolaris | = snv_32 | No fix listed |
| sun opensolaris | = snv_33 | No fix listed |
| sun opensolaris | = snv_34 | No fix listed |
| sun opensolaris | = snv_35 | No fix listed |
| sun opensolaris | = snv_36 | No fix listed |
| sun opensolaris | = snv_37 | No fix listed |
| sun opensolaris | = snv_38 | No fix listed |
| sun opensolaris | = snv_39 | No fix listed |
| sun opensolaris | = snv_40 | No fix listed |
| sun opensolaris | = snv_41 | No fix listed |
| sun opensolaris | = snv_42 | No fix listed |
| sun opensolaris | = snv_43 | No fix listed |
| sun opensolaris | = snv_44 | No fix listed |
| sun opensolaris | = snv_45 | No fix listed |
| sun opensolaris | = snv_46 | No fix listed |
| sun opensolaris | = snv_47 | No fix listed |
| sun opensolaris | = snv_48 | No fix listed |
| sun opensolaris | = snv_49 | No fix listed |
| sun opensolaris | = snv_50 | No fix listed |
| sun opensolaris | = snv_51 | No fix listed |
| sun opensolaris | = snv_52 | No fix listed |
| sun opensolaris | = snv_53 | No fix listed |
| sun opensolaris | = snv_54 | No fix listed |
| sun opensolaris | = snv_55 | No fix listed |
| sun opensolaris | = snv_56 | No fix listed |
| sun opensolaris | = snv_57 | No fix listed |
| sun opensolaris | = snv_58 | No fix listed |
| sun opensolaris | = snv_59 | No fix listed |
| sun opensolaris | = snv_60 | No fix listed |
| sun opensolaris | = snv_61 | No fix listed |
| sun opensolaris | = snv_62 | No fix listed |
| sun opensolaris | = snv_63 | No fix listed |
| sun opensolaris | = snv_64 | No fix listed |
| sun opensolaris | = snv_65 | No fix listed |
| sun opensolaris | = snv_66 | No fix listed |
| sun opensolaris | = snv_67 | No fix listed |
| sun opensolaris | = snv_68 | No fix listed |
| sun opensolaris | = snv_69 | No fix listed |
| sun opensolaris | = snv_70 | No fix listed |
| sun opensolaris | = snv_71 | No fix listed |
| sun opensolaris | = snv_72 | No fix listed |
| sun opensolaris | = snv_73 | No fix listed |
| sun opensolaris | = snv_74 | No fix listed |
| sun opensolaris | = snv_75 | No fix listed |
| sun opensolaris | = snv_76 | No fix listed |
| sun opensolaris | = snv_100 | No fix listed |
| sun opensolaris | = snv_101 | No fix listed |
| sun opensolaris | = snv_102 | No fix listed |
| sun solaris | = 10.0 | No fix listed |
References
- 33160 third-party-advisory vendor-advisory
- 4801 third-party-advisory
- 242266 patch vendor-advisory
- 15962 exploit
- 20081218 [TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference mailing-list
- 32904 vdb-entry
- 1021464 vdb-entry
- www.trapkit.de
- ADV-2008-3454 vdb-entry
- solaris-iptunnel-code-exeuction(47449) vdb-entry
- oval:org.mitre.oval:def:5949 signature vdb-entry