PT-2009-6076 · Sun · Sun Solaris 10+1

Publicado 2009-11-03 · Atualizado 2017-09-19 · CVE-2009-3851

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris 10

Description The issue affects the operation of the xscreensaver-demo command for the XScreenSaver application due to interference from Trusted Extensions. This interference makes it easier for physically proximate attackers to access an unattended workstation when the intended screen locking did not occur. The problem is related to the restart daemon.

Recommendations For Sun Solaris 10, consider disabling the Trusted Extensions to prevent interference with the xscreensaver-demo command until a proper fix is available. Restrict access to unattended workstations to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2009-3851

Produtos afetados

Sun Solaris 10

Xscreensaver

Referências · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-3851 · Nota de Segurança