Skip to content

CVE-2008-7300 The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated....

HighCVSS 8.5 EPSS 1.5%
Published
Updated
Exploit status
No public exploit known

Description

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone.

Affected products

ProductAffected versionsFixed in
sun opensolaris = build_snv_39 No fix listed
sun opensolaris = build_snv_47 No fix listed
sun opensolaris = build_snv_59 No fix listed
sun opensolaris = build_snv_64 No fix listed
sun opensolaris = build_snv_67 No fix listed
sunos = 5.10 No fix listed

References

  • 31412 third-party-advisory vendor-advisory
  • 240099 vendor-advisory
  • 30602 vdb-entry