CVE-2008-4992: Medium severity sun blade t6300 server vulnerability

Published Nov 7, 2008

Updated

The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors.

Affected Software

31 affected components

Sun Blade T6300 Server=6.6.3

Sun Blade T6300 Server=6.6.4

Sun Blade T6300 Server=6.6.5

Sun Blade T6320 Server=7.1.3d

Sun Blade T6320 Server=7.1.3e

Sun Fire Enterprise Server T1000=6.6.3

Sun Fire Enterprise Server T1000=6.6.4

Sun Fire Enterprise Server T1000=6.6.5

Sun Fire Enterprise Server T2000=6.6.3

Sun Fire Enterprise Server T2000=6.6.4

Sun Fire Enterprise Server T2000=6.6.5

Sun Netra Cp3060 Server=6.6.3

Sun Netra Cp3060 Server=6.6.4

Sun Netra Cp3060 Server=6.6.5

Sun Netra T2000 Server=6.6.3

Sun Netra T2000 Server=6.6.4

Sun Netra T2000 Server=6.6.5

Sun Netra T5220 Server=7.1.3

Sun Sparc Enterprise Server T1000=6.6.3

Sun Sparc Enterprise Server T1000=6.6.4

Sun Sparc Enterprise Server T1000=6.6.5

Sun Sparc Enterprise Server T2000=6.6.3

Sun Sparc Enterprise Server T2000=6.6.4

Sun Sparc Enterprise Server T2000=6.6.5

Sun Sparc Enterprise Server T5120=7.1.3e

Sun Sparc Enterprise Server T5140=7.1.3d

Sun Sparc Enterprise Server T5140=7.1.3e

Sun Sparc Enterprise Server T5220=7.1.3d

Sun Sparc Enterprise Server T5220=7.1.3e

Sun Sparc Enterprise Server T5240=7.1.3d

Sun Sparc Enterprise Server T5240=7.1.3e

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1

Event History

Nov 7, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4992?

CVE-2008-4992 has been classified with a moderate to high severity level due to potential unauthorized access to memory across logical domains.

How do I fix CVE-2008-4992?

To mitigate CVE-2008-4992, it is recommended to upgrade to Sun System Firmware versions 6.6.6 or 7.1.4 or later.

Which systems are affected by CVE-2008-4992?

CVE-2008-4992 affects several Sun Blade and SPARC Enterprise server models running specific versions of Sun System Firmware, including versions 6.6.3 to 6.6.5 and 7.1.3 to 7.1.3.e.

What type of vulnerability is CVE-2008-4992?

CVE-2008-4992 is a privilege escalation vulnerability that enables logical domain users to access memory belonging to other logical domains.

When was CVE-2008-4992 publicly disclosed?

CVE-2008-4992 was publicly disclosed in November 2008.