PT-2009-3467 · Sun · Sun Solaris+1

Publicado 2009-03-12 · Atualizado 2009-04-02 · CVE-2009-0875

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 94

Description A race condition exists in the Doors subsystem in the kernel, allowing local users to cause a denial of service, potentially bypass file permissions, or gain kernel-context privileges. This issue is related to the timing of control transfer from a caller to a door server.

Recommendations For Sun Solaris versions 8 through 10, consider applying a patch or fix to resolve the issue. For OpenSolaris versions prior to snv 94, update to a version after snv 94 to mitigate the risk. As a temporary workaround, consider restricting access to the Doors subsystem to minimize the risk of exploitation.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2009-0875

Produtos afetados

Opensolaris

Sun Solaris

Referências · 11

• http://vupen.com/english/advisories/2009/0766 · Nota
• http://vupen.com/english/advisories/2009/0673 · Nota
• http://osvdb.org/52561 · Nota
• http://secunia.com/advisories/34227 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0875 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1 · Aviso do Fabricante
• http://secunia.com/advisories/34375 · Nota
• http://securitytracker.com/id?1021840 · Nota
• http://securityfocus.com/bid/34081 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 · Aviso do Fabricante