PT-2009-3976 · Sun · Sun Solaris+2

Published 2009-04-29 · Updated 2017-08-17 · CVE-2009-1478

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Sun Solaris versions prior to 10 with updates before snv 114 OpenSolaris versions prior to snv 114

Description: The issue affects the DTrace ioctl handlers, allowing local users to cause a denial of service, resulting in a system panic, through unknown vectors.

Recommendations: For Sun Solaris versions prior to 10 with updates before snv 114, update to a version with updates snv 114 or later. For OpenSolaris versions prior to snv 114, update to a version snv 114 or later.

Exploit

Fix

Related Identifiers

CVE-2009-1478

Affected Products

Dtrace

Opensolaris

Sun Solaris

References · 12

• 🔥 https://exploit-db.com/exploits/8597 · Exploit
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1478 · Security Note
• http://secunia.com/advisories/35098 · Note
• http://secunia.com/advisories/34836 · Note
• http://vupen.com/english/advisories/2009/1199 · Note
• http://vupen.com/english/advisories/2009/1378 · Note
• http://securityfocus.com/bid/34753 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50220 · Note
• http://securitytracker.com/id?1022143 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm · Note
• http://osvdb.org/54138 · Note