CVE-2008-5099
Published Nov 17, 2008
Last updated 7 years ago
Overview
- Description
- Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1 Note: The x86 Platform is not affected by this issue, as Logical Domains (LDoms) software is supported only on the Sun SPARC Platform.
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:logical_domain_manager:1.0:_nil_:sparc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9B820C8-745D-4FE6-98D3-5394AEF28AE0"
},
{
"criteria": "cpe:2.3:a:sun:logical_domain_manager:1.0.1:_nil_:sparc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E77685AA-DE79-4033-A407-936CA647B1D2"
},
{
"criteria": "cpe:2.3:a:sun:logical_domain_manager:1.0.2:_nil_:sparc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E40E231-2AA1-48AE-8A1F-5F69EC7B63BE"
},
{
"criteria": "cpe:2.3:a:sun:logical_domain_manager:1.0.3:_nil_:sparc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC95A91-C8CE-4D72-80EB-EAA1303AA205"
}
],
"operator": "OR"
}
]
}
]