PT-2009-4587 · Sun · Opensolaris+1

Publicado 2009-06-19 · Atualizado 2017-09-29 · CVE-2009-2135

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 and earlier OpenSolaris versions prior to snv 107

Description The issue is related to multiple race conditions in the Solaris Event Port API. It allows local users to cause a denial of service, resulting in a system panic. The race condition occurs between the port dissociate and close functions.

Recommendations For Sun Solaris version 10 and earlier, update to a version later than the affected one. For OpenSolaris versions prior to snv 107, update to a version later than snv 107. As a temporary workaround, consider restricting access to the Solaris Event Port API to minimize the risk of exploitation.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2009-2135

Produtos afetados

Opensolaris

Sun Solaris

Referências · 12

• http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm · Nota
• http://securityfocus.com/bid/35437 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5906 · Nota
• http://secunia.com/advisories/35279 · Nota
• http://securitytracker.com/id?1022422 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51284 · Nota
• http://osvdb.org/55231 · Nota
• http://osvdb.org/55232 · Nota
• http://vupen.com/english/advisories/2009/1634 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2135 · Nota de Segurança