PT-2009-3466 · Sun · Sun Solaris+1

Publicado 2009-03-12 · Atualizado 2009-04-02 · CVE-2009-0874

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 94

Description The issue affects the Doors subsystem in the kernel, allowing local users to cause a denial of service, bypass file permissions, or gain kernel-context privileges. This can be achieved through vectors including an argument handling deadlock in a door server and watchpoint problems in the door call function.

Recommendations For Sun Solaris versions 8 through 10, consider applying a patch or fix to address the argument handling deadlock and watchpoint problems in the door call function. For OpenSolaris versions prior to snv 94, update to a version after snv 94 to resolve the issue. As a temporary workaround, consider restricting access to the Doors subsystem to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-0874

Produtos afetados

Opensolaris

Sun Solaris

Referências · 10

• http://vupen.com/english/advisories/2009/0766 · Nota
• http://vupen.com/english/advisories/2009/0673 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0874 · Nota de Segurança
• http://secunia.com/advisories/34227 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1 · Aviso do Fabricante
• http://secunia.com/advisories/34375 · Nota
• http://securitytracker.com/id?1021840 · Nota
• http://securityfocus.com/bid/34081 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 · Aviso do Fabricante