PT-2009-6064 · Sun · Opensolaris+1

Published 2009-11-02 · Updated 2017-09-19 · CVE-2009-3839

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 37 through snv 125

Description The issue is related to an unspecified vulnerability in the Solaris Trusted Extensions Policy configuration. This might allow remote attackers to execute arbitrary code by leveraging access to the X server.

Recommendations For Sun Solaris version 10, update the Solaris Trusted Extensions Policy configuration to prevent arbitrary code execution. For OpenSolaris versions snv 37 through snv 125, update the Solaris Trusted Extensions Policy configuration to prevent arbitrary code execution.

Fix

Related Identifiers

CVE-2009-3839

Affected Products

Opensolaris

Sun Solaris

References · 6

• http://secunia.com/advisories/37184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3839 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3070 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480 · Note
• http://securityfocus.com/bid/36840 · Note