CVE-2008-0965
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris...
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
Exploit likelihood
What each source reports
NVD Score used
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
- Record
CVE-2008-0965- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
- Record
CVE-2008-0965- Updated
- 2026-11-02
EUVDEUVD-2008-0972 No score
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
- Record
EUVD-2008-0972- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8frx-mxpf-4r9p No score
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris...
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
- Record
GHSA-8frx-mxpf-4r9p- Weakness
- CWE-134
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0965 is a high vulnerability (CVSS 9.3) in Sun Opensolaris, published August 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.70%, the 93rd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/44222
sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1
labs.idefense.com/intelligence/vulnerabilities/display.php?id=735
securitytracker.com/id?1020633
support.avaya.com/elmodocs2/security/ASA-2008-355.htm
vupen.com/english/advisories/2008/2311
Show 8 moreShow less
secunia.com/advisories/31535
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742
securityfocus.com/bid/30556
nvd.nist.gov/vuln/detail/CVE-2008-0965
github.com/advisories/GHSA-8frx-mxpf-4r9p