CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.

Affected products

Snoop

Sun Opensolaris

All versions

Sun Solaris

= 8, 9, 10

Sun Sunos

= 5.8, 5.9, 5.10

CVSS 2.0

9.3 HIGH

EPSS

5.7% (92th percentile)

Weakness

CWE-134

NVD status

Modified

Published

2008-08-08