What’s Vulnerable › Vulnerabilities

CVE-2008-3875

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-09-02 · updated 2026-06-16
• Weakness: CWE-264

Description

The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls.

Affected products

• Sun Opensolaris: through build_snv_89; build_snv_01, build_snv_02, build_snv_13, build_snv_19, build_snv_22, build_snv_39 (+6)
• Sun Solaris: 8, 9, 10

References

• http://secunia.com/advisories/31667
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1
• http://www.securityfocus.com/bid/30880
• http://www.securitytracker.com/id?1020780
• http://www.vupen.com/english/advisories/2008/2460
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44753
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453
• http://secunia.com/advisories/31667
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1
• http://www.securityfocus.com/bid/30880
• http://www.securitytracker.com/id?1020780
• http://www.vupen.com/english/advisories/2008/2460

Get alerted when CVE-2008-3875 or the next vulnerability affects your stack