CVE-2008-0965: Critical severity oracle solaris and zettabyte file system (zfs) vulnerability
Published Aug 8, 2008
·Updated
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
Affected Software
23 affected components
Sun Solaris=8
Sun Solaris=9
Sun OpenSolaris<=build_snv_95
Sun OpenSolaris=build_snv_89
Sun Solaris=9
Sun OpenSolaris=build_snv_19
Sun OpenSolaris=build_snv_01
Sun OpenSolaris=build_snv_92
Sun OpenSolaris=build_snv_88
Sun Solaris=8
Sun SunOS=5.8
Sun Solaris=10
Sun OpenSolaris=build_snv_22
Sun OpenSolaris
Sun SunOS=5.10
Sun SunOS=5.9
Sun OpenSolaris=build_snv_91
Sun OpenSolaris
Sun OpenSolaris=build_snv_02
Sun OpenSolaris=build_snv_64
Sun Solaris=10
Sun OpenSolaris
Sun OpenSolaris=build_snv_13
Event History
Aug 8, 2008
CVE Published
via MITRE·06:12 PM
Data Sourced
via MITRE·06:12 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0965?
CVE-2008-0965 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2008-0965?
To fix CVE-2008-0965, apply the latest patches available for your version of Solaris or OpenSolaris.
3
What systems are affected by CVE-2008-0965?
CVE-2008-0965 affects Sun Solaris versions 8 to 10 and OpenSolaris builds prior to snv_96.
4
Can CVE-2008-0965 be exploited remotely?
Yes, CVE-2008-0965 can be exploited remotely through crafted SMB packets.
5
What are the consequences of exploiting CVE-2008-0965?
Exploitation of CVE-2008-0965 can lead to arbitrary code execution on the vulnerable system.