Vulnerability in Sun Opensolaris

CVE-2008-7300

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

Affected products

Sun Opensolaris — versions build_snv_39, build_snv_47, build_snv_59
Sun Sunos — versions 5.10
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)