MEDIUM · 4.6

CVE-2008-5699

The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive info...

Vulnerability Description

The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors.

CVSS Score

4.6

MEDIUM

AV:L/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
SunOpensolarissnv_50
SunSolaris10.0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2008-5699?

CVE-2008-5699 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive info...

How severe is CVE-2008-5699?

CVE-2008-5699 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-5699?

Check the references section above for vendor advisories and patch information. Affected products include: Sun Opensolaris, Sun Solaris.