Information disclosure in Sun Solaris

CVE-2008-0938

Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.

Vulnerability class: Information Disclosure

EPSS: 0.003 (27.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References