Vulnerability Details : CVE-2008-2538

Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors.

Published 2008-06-03 15:32:00

Updated 2017-09-29 01:31:13

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2008-2538

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 11 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2008-2538

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	[email protected]
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-2538

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

Assigned by: [email protected] (Primary)

References for CVE-2008-2538

Products affected by CVE-2008-2538

SUN » Solaris » Version: 10 X86 Edition
cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 10 Sparc Edition
cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 9 Sparc Edition
cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 9 X86 Edition
cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 8 X86 Edition
cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 8 Sparc Edition
cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*
Matching versions