PT-2009-4996 · Sun · Opensolaris+1

Published 2009-07-27 · Updated 2009-07-27 · CVE-2009-2596

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 9 and 10 OpenSolaris versions prior to snv 121

Description The issue is related to an unspecified vulnerability in the Solaris Auditing subsystem. It affects systems when extended file attributes are used, allowing local users to cause a denial of service (panic) through vectors related to fad aupath structure members.

Recommendations For Sun Solaris versions 9 and 10, update to a version that includes the fix for this issue. For OpenSolaris versions prior to snv 121, update to a version snv 121 or later. As a temporary workaround, consider restricting the use of extended file attributes until a patch is available.

Fix

Related Identifiers

CVE-2009-2596

Affected Products

Opensolaris

Sun Solaris

References · 5

• http://secunia.com/advisories/35980 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2596 · Security Note
• http://securityfocus.com/bid/35787 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1 · Vendor Advisory