Sun System Firmware Unspecified Local Information Disclosure Vulnerability
BID:32143
Info
Sun System Firmware Unspecified Local Information Disclosure Vulnerability
| Bugtraq ID: | 32143 |
| Class: | Unknown |
| CVE: |
CVE-2008-4992 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 05 2008 12:00AM |
| Updated: | Nov 13 2008 04:54PM |
| Credit: | Sun |
| Vulnerable: |
Sun System Firmware 7.1 Sun System Firmware 6.6 Sun Sun Netra T2000 0 Sun Sun Netra CP3060 0 Sun Sun Fire T2000 0 Sun Sun Fire T1000 0 Sun Sun Blade T6320 0 Sun Sun Blade T6300 0 Sun SPARC Enterprise T5240 Server 0 Sun SPARC Enterprise T5220 Server 0 Sun SPARC Enterprise T5140 Server 0 Sun SPARC Enterprise T5120 Server 0 Sun Netra T5220 Server 0 |
| Not Vulnerable: | |
Discussion
Sun System Firmware Unspecified Local Information Disclosure Vulnerability
Sun System Firmware is prone to a local information-disclosure vulnerability caused by an unspecified error.
Successful exploits may allow local privileged attackers in one logical domain to gain access to memory in another logical domain. This may aid in further attacks.
The issue affects certain Sun SPARC Systems using the Sun UltraSPARC T1, UltraSPARC T2, and UltraSPARC T2+ processors.
The issue can occur on the following platforms running various versions of Sun System Firmware 6.6 or 7.1:
SPARC Enterprise T5140/T5240 running Sun System Firmware 7.1.3.d or 7.1.3.e
Netra T5220 running Sun System Firmware 7.1.3
SPARC Enterprise T5120/T5220 running Sun System Firmware 7.1.3.d or 7.1.3.e
Blade T6320 running Sun System Firmware 7.1.3.d or 7.1.3.e
Fire / SPARC Enterprise T2000 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Fire / SPARC Enterprise T1000 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Netra T2000 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Netra CP3060 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Blade T6300 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Sun System Firmware is prone to a local information-disclosure vulnerability caused by an unspecified error.
Successful exploits may allow local privileged attackers in one logical domain to gain access to memory in another logical domain. This may aid in further attacks.
The issue affects certain Sun SPARC Systems using the Sun UltraSPARC T1, UltraSPARC T2, and UltraSPARC T2+ processors.
The issue can occur on the following platforms running various versions of Sun System Firmware 6.6 or 7.1:
SPARC Enterprise T5140/T5240 running Sun System Firmware 7.1.3.d or 7.1.3.e
Netra T5220 running Sun System Firmware 7.1.3
SPARC Enterprise T5120/T5220 running Sun System Firmware 7.1.3.d or 7.1.3.e
Blade T6320 running Sun System Firmware 7.1.3.d or 7.1.3.e
Fire / SPARC Enterprise T2000 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Fire / SPARC Enterprise T1000 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Netra T2000 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Netra CP3060 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Blade T6300 running Sun System Firmware 6.6.3, 6.6.4 or 6.6.5
Exploit / POC
Sun System Firmware Unspecified Local Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun System Firmware Unspecified Local Information Disclosure Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
References
Sun System Firmware Unspecified Local Information Disclosure Vulnerability
References:
References:
- Sun Homepage (Sun Microsystems )
- Solution 244826: A Security Vulnerability in the Sun System Firmware on Certain (Sun)