PT-2009-5429 · Sun · Opensolaris+2

Publicado 2009-09-08 · Atualizado 2009-09-09 · CVE-2009-3101

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10 OpenSolaris versions snv 109 through snv 122

Description: The issue is related to improper handling of Trusted Extensions, allowing local users to cause a denial of service by locking the screen. This results in CPU consumption and console hang, and is related to a regression in certain Solaris and OpenSolaris patches.

Recommendations: For xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, consider disabling the screen locking feature to prevent denial of service attacks. For OpenSolaris versions snv 109 through snv 122, restrict access to the screen locking functionality to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-3101

Produtos afetados

Opensolaris

Sun Solaris 10

Xscreensaver

Referências · 3

• 🔥 http://bugs.opensolaris.org/view_bug.do?bug_id=6839026 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3101 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1 · Aviso do Fabricante