PT-2009-6254 · Sun · Sun Solaris+1

Publicado 2009-11-25 · Atualizado 2017-08-17 · CVE-2009-4075

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 99 through snv 123

Description The issue is related to an unspecified vulnerability in the timeout mechanism in sshd, which allows remote attackers to cause a denial of service, resulting in a daemon outage. This is triggered by unknown vectors that cause a "dangling sshd authentication thread."

Recommendations For Sun Solaris version 10, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For OpenSolaris versions snv 99 through snv 123, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-4075

Produtos afetados

Opensolaris

Sun Solaris

Referências · 7

• http://securityfocus.com/bid/37116 · Correção
• http://osvdb.org/60498 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54401 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1 · Correção
• http://vupen.com/english/advisories/2009/3333 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4075 · Nota de Segurança