Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992.

Logical Domains (LDoms) Manager 1.0 ldmd patch.
Date this patch was last updated by Sun : Nov/11/08

This plugin has been deprecated and either replaced with individual 139395 patch-revision plugins, or deemed non-security related.

Logical Domains (LDoms) Manager 1.0.2 ldmd patch.
Date this patch was last updated by Sun : Nov/11/08

This plugin has been deprecated and either replaced with individual 139397 patch-revision plugins, or deemed non-security related.

Logical Domains (LDoms) Manager 1.0.3 ldmd patch.
Date this patch was last updated by Sun : Feb/26/09

This plugin has been deprecated and either replaced with individual 139398 patch-revision plugins, or deemed non-security related.

Logical Domains (LDoms) Manager 1.0.1 ldmd patch.
Date this patch was last updated by Sun : Nov/11/08

This plugin has been deprecated and either replaced with individual 139396 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
37954	Solaris 10 (sparc) : 139395-02 (deprecated)	Nessus	Solaris Local Security Checks	medium
37547	Solaris 10 (sparc) : 139397-02 (deprecated)	Nessus	Solaris Local Security Checks	medium
37522	Solaris 10 (sparc) : 139398-02 (deprecated)	Nessus	Solaris Local Security Checks	medium
36656	Solaris 10 (sparc) : 139396-02 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2008-5099

high

Tenable Plugins

medium

medium

medium

medium