PT-2009-4996 · Sun · Opensolaris+1

Publicado 2009-07-27 · Atualizado 2009-07-27 · CVE-2009-2596

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 9 and 10 OpenSolaris versions prior to snv 121

Description The issue is related to an unspecified vulnerability in the Solaris Auditing subsystem. It affects systems when extended file attributes are used, allowing local users to cause a denial of service (panic) through vectors related to fad aupath structure members.

Recommendations For Sun Solaris versions 9 and 10, update to a version that includes the fix for this issue. For OpenSolaris versions prior to snv 121, update to a version snv 121 or later. As a temporary workaround, consider restricting the use of extended file attributes until a patch is available.

Correção

Identificadores relacionados

CVE-2009-2596

Produtos afetados

Opensolaris

Sun Solaris

Referências · 5

• http://secunia.com/advisories/35980 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2596 · Nota de Segurança
• http://securityfocus.com/bid/35787 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1 · Aviso do Fabricante