CVE-2008-0938

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-25 · updated 2026-06-16
Weakness: CWE-200

Description

Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.

Affected products

Sun Solaris: 10

References

http://secunia.com/advisories/29037
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231803-1
http://www.securityfocus.com/bid/27942
http://www.securitytracker.com/id?1019483
http://www.vupen.com/english/advisories/2008/0640
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5451
http://secunia.com/advisories/29037
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231803-1
http://www.securityfocus.com/bid/27942
http://www.securitytracker.com/id?1019483
http://www.vupen.com/english/advisories/2008/0640
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5451

Get alerted when CVE-2008-0938 or the next vulnerability affects your stack