CVE-2008-0965: Sun Opensolaris

High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.

Affected products

• Sun Opensolaris: any version; up to and including build_snv_95; version build_snv_01 only; version build_snv_02 only; version build_snv_13 only; version build_snv_19 only; …
• Sun Solaris: version 8 only; version 9 only; version 10 only
• Sun Sunos: version 5.8 only; version 5.9 only; version 5.10 only

Published 2008-08-08. Last modified 2026-06-16.