Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2008-0965

Summary
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At-08 Aug, 2008 | 18:12
Updated At-07 Aug, 2024 | 08:01
Rejected At-
Credits

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:mitre
Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At:08 Aug, 2008 | 18:12
Updated At:07 Aug, 2024 | 08:01
Rejected At:
▼CVE Numbering Authority (CNA)

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
vdb-entry
x_refsource_XF
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
vendor-advisory
x_refsource_SUNALERT
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735
third-party-advisory
x_refsource_IDEFENSE
http://www.securitytracker.com/id?1020633
vdb-entry
x_refsource_SECTRACK
http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2008/2311
vdb-entry
x_refsource_VUPEN
http://secunia.com/advisories/31535
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/31386
third-party-advisory
x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/44415
vdb-entry
x_refsource_XF
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742
vdb-entry
signature
x_refsource_OVAL
http://www.securityfocus.com/bid/30556
vdb-entry
x_refsource_BID
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
Resource:
vendor-advisory
x_refsource_SUNALERT
Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735
Resource:
third-party-advisory
x_refsource_IDEFENSE
Hyperlink: http://www.securitytracker.com/id?1020633
Resource:
vdb-entry
x_refsource_SECTRACK
Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.vupen.com/english/advisories/2008/2311
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://secunia.com/advisories/31535
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://secunia.com/advisories/31386
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44415
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
Resource:
x_refsource_CONFIRM
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742
Resource:
vdb-entry
signature
x_refsource_OVAL
Hyperlink: http://www.securityfocus.com/bid/30556
Resource:
vdb-entry
x_refsource_BID
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
vdb-entry
x_refsource_XF
x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
vendor-advisory
x_refsource_SUNALERT
x_transferred
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735
third-party-advisory
x_refsource_IDEFENSE
x_transferred
http://www.securitytracker.com/id?1020633
vdb-entry
x_refsource_SECTRACK
x_transferred
http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
x_refsource_CONFIRM
x_transferred
http://www.vupen.com/english/advisories/2008/2311
vdb-entry
x_refsource_VUPEN
x_transferred
http://secunia.com/advisories/31535
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/31386
third-party-advisory
x_refsource_SECUNIA
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/44415
vdb-entry
x_refsource_XF
x_transferred
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
x_refsource_CONFIRM
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742
vdb-entry
signature
x_refsource_OVAL
x_transferred
http://www.securityfocus.com/bid/30556
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
Resource:
vendor-advisory
x_refsource_SUNALERT
x_transferred
Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735
Resource:
third-party-advisory
x_refsource_IDEFENSE
x_transferred
Hyperlink: http://www.securitytracker.com/id?1020633
Resource:
vdb-entry
x_refsource_SECTRACK
x_transferred
Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2008/2311
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://secunia.com/advisories/31535
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://secunia.com/advisories/31386
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44415
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742
Resource:
vdb-entry
signature
x_refsource_OVAL
x_transferred
Hyperlink: http://www.securityfocus.com/bid/30556
Resource:
vdb-entry
x_refsource_BID
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:cve@mitre.org
Published At:08 Aug, 2008 | 18:41
Updated At:30 Oct, 2018 | 16:25

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.09.3HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 9.3
Base severity: HIGH
Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
CPE Matches
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>*
cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>*
cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>*
cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>Versions up to build_snv_95(inclusive)
cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_01
cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_02
cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_13
cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_19
cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_22
cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_64
cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_88
cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_89
cpe:2.3:o:sun:opensolaris:build_snv_89:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_91
cpe:2.3:o:sun:opensolaris:build_snv_91:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>opensolaris>>build_snv_92
cpe:2.3:o:sun:opensolaris:build_snv_92:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>solaris>>8
cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>solaris>>8
cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>solaris>>9
cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>solaris>>9
cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>solaris>>10
cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>solaris>>10
cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>sunos>>5.8
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>sunos>>5.9
cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
Sun Microsystems (Oracle Corporation)
sun
>>sunos>>5.10
cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-134Primarynvd@nist.gov
CWE ID: CWE-134
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735cve@mitre.org
N/A
http://secunia.com/advisories/31386cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/31535cve@mitre.org
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1cve@mitre.org
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-355.htmcve@mitre.org
N/A
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935cve@mitre.org
N/A
http://www.securityfocus.com/bid/30556cve@mitre.org
N/A
http://www.securitytracker.com/id?1020633cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2008/2311cve@mitre.org
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44222cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/44415cve@mitre.org
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742cve@mitre.org
N/A
Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/31386
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/31535
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/30556
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1020633
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2008/2311
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44222
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44415
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742
Source: cve@mitre.org
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

104Records found
CVE-2007-5247
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-9.3||HIGH
EPSS-5.06% / 89.37%
||
7 Day CHG~0.00%
Published-06 Oct, 2007 | 17:00
Updated-07 Aug, 2024 | 15:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.

Action-Not Available
Vendor-monolith_productionsn/a
Product-first_encounter_assault_reconn/a
CWE ID-CWE-134
Use of Externally-Controlled Format String
CVE-2007-5248
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-9.3||HIGH
EPSS-7.81% / 91.60%
||
7 Day CHG~0.00%
Published-06 Oct, 2007 | 17:00
Updated-07 Aug, 2024 | 15:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server or (2) a PB_U packet to UCON. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.

Action-Not Available
Vendor-id_softwaretake2gamesn/a
Product-quake_4doom_3preyn/a
CWE ID-CWE-134
Use of Externally-Controlled Format String
CVE-2007-4708
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-9.3||HIGH
EPSS-2.96% / 85.95%
||
7 Day CHG~0.00%
Published-19 Dec, 2007 | 21:00
Updated-07 Aug, 2024 | 15:08
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-134
Use of Externally-Controlled Format String
CVE-2020-1992
Matching Score-4
Assigner-Palo Alto Networks, Inc.
ShareView Details
Matching Score-4
Assigner-Palo Alto Networks, Inc.
CVSS Score-8.1||HIGH
EPSS-2.29% / 84.06%
||
7 Day CHG~0.00%
Published-08 Apr, 2020 | 18:41
Updated-17 Sep, 2024 | 03:44
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation

A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC) allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 9.0 versions before 9.0.7; PAN-OS 9.1 versions before 9.1.2 on PA-7000 Series devices with an LFC installed and configured. This issue requires WildFire services to be configured and enabled. This issue does not affect PAN-OS 8.1 and earlier releases. This issue does not affect any other PA Series firewalls.

Action-Not Available
Vendor-Palo Alto Networks, Inc.
Product-pan-ospa-7050pa-7080PAN-OS
CWE ID-CWE-134
Use of Externally-Controlled Format String
  • Previous
  • 1
  • 2
  • 3
  • Next
Details not found