PT-2009-3467 · Sun · Sun Solaris+1

Published 2009-03-12 · Updated 2009-04-02 · CVE-2009-0875

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 94

Description A race condition exists in the Doors subsystem in the kernel, allowing local users to cause a denial of service, potentially bypass file permissions, or gain kernel-context privileges. This issue is related to the timing of control transfer from a caller to a door server.

Recommendations For Sun Solaris versions 8 through 10, consider applying a patch or fix to resolve the issue. For OpenSolaris versions prior to snv 94, update to a version after snv 94 to mitigate the risk. As a temporary workaround, consider restricting access to the Doors subsystem to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2009-0875

Affected Products

Opensolaris

Sun Solaris

References · 11

• http://secunia.com/advisories/34227 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0875 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 · Vendor Advisory
• http://vupen.com/english/advisories/2009/0766 · Note
• http://vupen.com/english/advisories/2009/0673 · Note
• http://osvdb.org/52561 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm · Note
• http://secunia.com/advisories/34375 · Note
• http://securitytracker.com/id?1021840 · Note
• http://securityfocus.com/bid/34081 · Note