PT-2009-4847 · Sun · Opensolaris+1

Published 2009-07-10 · Updated 2009-07-22 · CVE-2009-2430

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8, 9, 10 OpenSolaris versions snv 01 through snv 58

Description The issue allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors when Solaris Auditing is enabled.

Recommendations For Sun Solaris versions 8, 9, 10, and OpenSolaris versions snv 01 through snv 58, consider disabling the Solaris Auditing feature until a fix is available. Restrict access to the auditconfig command to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2009-2430

Affected Products

Opensolaris

Sun Solaris

References · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1 · Vendor Advisory
• http://secunia.com/advisories/35580 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2430 · Security Note
• http://securityfocus.com/bid/35501 · Note