CVE-2008-7300 Security feature bypass in n/a

High 8.5 Published 5 Oct 2011 Updated 16 Sep 2024

Authenticated users can bypass Mandatory Access Control policies to access the global zone in Solaris Trusted Extensions when a labeled zone is installed.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-7300?

CVE-2008-7300 is a high-severity vulnerability in Sun Opensolaris, published on 5 Oct 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone.

Weakness: CWE-264

Which versions are affected by CVE-2008-7300?

It affects 2 products.

Products include Sun Opensolaris, Sun Sunos.

How do I fix CVE-2008-7300?

No fix has been published for CVE-2008-7300 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-7300 being exploited?

There is no known exploitation of CVE-2008-7300 in the wild and no public exploit code.

All Sun Opensolaris vulnerabilities

Sources

Also known as GHSA-cwhj-8r87-52jv.