CVE:CVE-2008-3838
CNNVD:CNNVD-200808-337
Solaris是Sun公司研制的类Unix操作系统。
Sun Solaris 10以及OpenSolaris snv_88之前的版本的NFS中Remote Procedure Calls (RPC) 存在漏洞。
非全局域的本地管理员可以读取和修改任意非全局区域的NFS流量，这可能导致文件更改或拒绝服务攻击。
solution:Upgrade sun opensolaris to a higher version than *,snv_87,snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_77,snv_78,snv_79,snv_80,snv_81,snv_82,snv_83,snv_84,snv_85,snv_86,and avoid the version (,snv_87],snv_01,snv_02,snv_03,snv_04,snv_05,snv_06,snv_07,snv_08,snv_09,snv_10,snv_11,snv_12,snv_13,snv_14,snv_15,snv_16,snv_17,snv_18,snv_19,snv_20,snv_21,snv_22,snv_23,snv_24,snv_25,snv_26,snv_27,snv_28,snv_29,snv_30,snv_31,snv_32,snv_33,snv_34,snv_35,snv_36,snv_37,snv_38,snv_39,snv_40,snv_41,snv_42,snv_43,snv_44,snv_45,snv_46,snv_47,snv_48,snv_49,snv_50,snv_51,snv_52,snv_53,snv_54,snv_55,snv_56,snv_57,snv_58,snv_59,snv_60,snv_61,snv_62,snv_63,snv_64,snv_65,snv_66,snv_67,snv_68,snv_69,snv_70,snv_71,snv_72,snv_73,snv_74,snv_75,snv_76,snv_77,snv_78,snv_79,snv_80,snv_81,snv_82,snv_83,snv_84,snv_85,snv_86; Upgrade sun solaris to a higher version than 10,and avoid the version 10