CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Information Exposure
Summary: sun logical domain manager (aka ldoms manager or ldm) 1.0 through 1.0.3 displays the value of the openboot prom (obp) security-password variable in cleartext, which allows local users to bypass the sparc firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than cve-2008-4992. http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1

note: the x86 platform is not affected by this issue, as logical domains (ldoms) software is supported only on the sun sparc platform.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2008-11-17
Last Modified Date: 2017-08-08