Vulnerability Details : CVE-2008-0964
Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.
Vulnerability category: OverflowExecute code
Threat overview for CVE-2008-0964
Top countries where our scanners detected CVE-2008-0964
Top open port discovered on systems with this issue
554
IPs affected by CVE-2008-0964 2
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2008-0964!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2008-0964
Probability of exploitation activity in the next 30 days: 36.68%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2008-0964
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
nvd@nist.gov |
CWE ids for CVE-2008-0964
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-0964
- http://www.securityfocus.com/bid/30556
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
-
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
- http://www.securitytracker.com/id?1020633
-
https://www.exploit-db.com/exploits/6328
-
http://www.vupen.com/english/advisories/2008/2311
Vendor Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318
Products affected by CVE-2008-0964
- cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_89:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_91:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_92:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*