CVE-2008-5699: Medium severity Sun OpenSolaris vulnerability

Published Dec 22, 2008

Updated

The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors.

Affected Software

112 affected components

Sun OpenSolaris=snv_70

Sun OpenSolaris=snv_101

Sun OpenSolaris=snv_90

Sun OpenSolaris=snv_93

Sun OpenSolaris=snv_85

Sun OpenSolaris=snv_57

Sun OpenSolaris=snv_87

Sun OpenSolaris=snv_50

Sun OpenSolaris=snv_73

Sun OpenSolaris=snv_72

Sun OpenSolaris=snv_67

Sun OpenSolaris=snv_87

Sun OpenSolaris=snv_91

Sun OpenSolaris=snv_92

Sun OpenSolaris=snv_85

Sun OpenSolaris=snv_77

Sun OpenSolaris=snv_53

Sun OpenSolaris=snv_74

Sun OpenSolaris=snv_104

Sun OpenSolaris=snv_103

Sun OpenSolaris=snv_66

Sun OpenSolaris=snv_80

Sun OpenSolaris=snv_52

Sun OpenSolaris=snv_82

Sun OpenSolaris=snv_55

Sun OpenSolaris=snv_72

Sun OpenSolaris=snv_88

Sun OpenSolaris=snv_56

Sun OpenSolaris=snv_50

Sun OpenSolaris=snv_93

Sun OpenSolaris=snv_58

Sun OpenSolaris=snv_54

Sun OpenSolaris=snv_103

Sun OpenSolaris=snv_84

Sun OpenSolaris=snv_65

Sun OpenSolaris=snv_86

Sun OpenSolaris=snv_62

Sun OpenSolaris=snv_100

Sun OpenSolaris=snv_71

Sun OpenSolaris=snv_64

Sun OpenSolaris=snv_77

Sun OpenSolaris=snv_66

Sun OpenSolaris=snv_61

Sun OpenSolaris=snv_79

Sun OpenSolaris=snv_89

Sun OpenSolaris=snv_90

Sun OpenSolaris=snv_59

Sun Solaris=10.0

Sun OpenSolaris=snv_70

Sun OpenSolaris=snv_78

Sun OpenSolaris=snv_96

Sun OpenSolaris=snv_99

Sun OpenSolaris=snv_59

Sun OpenSolaris=snv_97

Sun OpenSolaris=snv_51

Sun OpenSolaris=snv_79

Sun OpenSolaris=snv_63

Sun OpenSolaris=snv_83

Sun OpenSolaris=snv_100

Sun OpenSolaris=snv_96

Sun OpenSolaris=snv_81

Sun OpenSolaris=snv_94

Sun OpenSolaris=snv_86

Sun OpenSolaris=snv_98

Sun OpenSolaris=snv_52

Sun OpenSolaris=snv_80

Sun OpenSolaris=snv_69

Sun OpenSolaris=snv_98

Sun OpenSolaris=snv_68

Sun OpenSolaris=snv_67

Sun OpenSolaris=snv_71

Sun OpenSolaris=snv_95

Sun OpenSolaris=snv_64

Sun OpenSolaris=snv_82

Sun OpenSolaris=snv_102

Sun OpenSolaris=snv_78

Sun OpenSolaris=snv_57

Sun OpenSolaris=snv_60

Sun OpenSolaris=snv_75

Sun OpenSolaris=snv_81

Sun OpenSolaris=snv_76

Sun OpenSolaris=snv_95

Sun OpenSolaris=snv_88

Sun OpenSolaris=snv_55

Sun OpenSolaris=snv_73

Sun OpenSolaris=snv_69

Sun OpenSolaris=snv_84

Sun OpenSolaris=snv_60

Sun OpenSolaris=snv_92

Sun OpenSolaris=snv_104

Sun OpenSolaris=snv_63

Sun OpenSolaris=snv_61

Sun OpenSolaris=snv_53

Sun OpenSolaris=snv_94

Sun OpenSolaris=snv_58

Sun OpenSolaris=snv_101

Sun OpenSolaris=snv_83

Sun OpenSolaris=snv_68

Sun OpenSolaris=snv_97

Sun OpenSolaris=snv_99

Sun OpenSolaris=snv_75

Sun OpenSolaris=snv_56

Sun OpenSolaris=snv_102

Sun OpenSolaris=snv_74

Sun OpenSolaris=snv_91

Sun OpenSolaris=snv_76

Sun OpenSolaris=snv_54

Sun OpenSolaris=snv_62

Sun OpenSolaris=snv_89

Sun OpenSolaris=snv_51

Sun Solaris=10.0

Remediation

Patch Available

http://www.securityfocus.com/bid/32921

Event History

Dec 22, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-5699?

CVE-2008-5699 is classified with a medium severity due to its potential to allow local users to gain elevated privileges.

How do I fix CVE-2008-5699?

To fix CVE-2008-5699, it is recommended to apply the latest patches provided for Sun Solaris 10 and OpenSolaris versions affected.

Which versions of Solaris are affected by CVE-2008-5699?

CVE-2008-5699 affects Sun Solaris 10 and multiple OpenSolaris versions from snv_50 to snv_104.

What impact does CVE-2008-5699 have?

CVE-2008-5699 allows local users to gain privileges and potentially access sensitive information, which could compromise system integrity.

Is CVE-2008-5699 exploitable remotely?

No, CVE-2008-5699 is only exploitable by local users with access to the affected systems.