PT-2009-4847 · Sun · Opensolaris+1

Publicado 2009-07-10 · Atualizado 2009-07-22 · CVE-2009-2430

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8, 9, 10 OpenSolaris versions snv 01 through snv 58

Description The issue allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors when Solaris Auditing is enabled.

Recommendations For Sun Solaris versions 8, 9, 10, and OpenSolaris versions snv 01 through snv 58, consider disabling the Solaris Auditing feature until a fix is available. Restrict access to the auditconfig command to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2009-2430

Produtos afetados

Opensolaris

Sun Solaris

Referências · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1 · Aviso do Fabricante
• http://secunia.com/advisories/35580 · Aviso do Fabricante
• http://securityfocus.com/bid/35501 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2430 · Nota de Segurança