Unrated severityNVD Advisory· Published Nov 17, 2008· Updated Jun 16, 2026
CVE-2008-5099
CVE-2008-5099
Description
Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:sun:logical_domain_manager:1.0.1:_nil_:sparc:*:*:*:*:*+ 4 more
- cpe:2.3:a:sun:logical_domain_manager:1.0.1:_nil_:sparc:*:*:*:*:*
- cpe:2.3:a:sun:logical_domain_manager:1.0.2:_nil_:sparc:*:*:*:*:*
- cpe:2.3:a:sun:logical_domain_manager:1.0.3:_nil_:sparc:*:*:*:*:*
- cpe:2.3:a:sun:logical_domain_manager:1.0:_nil_:sparc:*:*:*:*:*
- (no CPE)range: 1.0 - 1.0.3
- Range: 1.0 - 1.0.3
- Range: 1.0 - 1.0.3
Patches
Vulnerability mechanics
References
11- sunsolve.sun.com/search/document.donvdPatchVendor Advisory
- sunsolve.sun.com/search/document.donvdPatchVendor Advisory
- secunia.com/advisories/32674nvdVendor Advisory
- sunsolve.sun.com/search/document.donvdVendor Advisory
- sunsolve.sun.com/search/document.donvdVendor Advisory
- securitytracker.com/idnvd
- sunsolve.sun.com/search/document.donvd
- support.avaya.com/elmodocs2/security/ASA-2008-460.htmnvd
- www.securityfocus.com/bid/32286nvd
- www.vupen.com/english/advisories/2008/3154nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/46594nvd
News mentions
0No linked articles in our index yet.