PT-2009-6254 · Sun · Sun Solaris+1

Published 2009-11-25 · Updated 2017-08-17 · CVE-2009-4075

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 99 through snv 123

Description The issue is related to an unspecified vulnerability in the timeout mechanism in sshd, which allows remote attackers to cause a denial of service, resulting in a daemon outage. This is triggered by unknown vectors that cause a "dangling sshd authentication thread."

Recommendations For Sun Solaris version 10, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For OpenSolaris versions snv 99 through snv 123, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-4075

Affected Products

Opensolaris

Sun Solaris

References · 7

• http://securityfocus.com/bid/37116 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-4075 · Security Note
• http://osvdb.org/60498 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54401 · Note
• http://vupen.com/english/advisories/2009/3333 · Note