Read the docs
TI-2008-05605 Aliases CVE-2008-5909GHSA-c6rr-h5vh-85fg

Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local…

Priority LOW 32Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641.

Why it matters now

EPSS 0.00317 24th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*all versionsVulnerableSun
  • cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Sun

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-5909
  2. 2026-10-03 Alias added: GHSA-c6rr-h5vh-85fg

References

Other 1

  • TI-2007-05153 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… CVSS 2.0HIGH 7.2
  • TI-2008-00925 Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and… CVSS 2.0HIGH 9.3
  • TI-2016-01184 Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network… CVSS 3.0CRITICAL 9.8
  • TI-2008-04764 in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before… CVSS 2.0HIGH 10.0
  • TI-2009-02188 The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does… CVSS 2.0HIGH 10.0
  • TI-2008-00926 Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and… CVSS 2.0HIGH 9.3
See all 112 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences