PT-2009-6076 · Sun · Sun Solaris 10+1

Published 2009-11-03 · Updated 2017-09-19 · CVE-2009-3851

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris 10

Description The issue affects the operation of the xscreensaver-demo command for the XScreenSaver application due to interference from Trusted Extensions. This interference makes it easier for physically proximate attackers to access an unattended workstation when the intended screen locking did not occur. The problem is related to the restart daemon.

Recommendations For Sun Solaris 10, consider disabling the Trusted Extensions to prevent interference with the xscreensaver-demo command until a proper fix is available. Restrict access to unattended workstations to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2009-3851

Affected Products

Sun Solaris 10

Xscreensaver

References · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-3851 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845 · Note