Vulnerability CVE-2009-0477 - CERT Civis.Net

Vulnerability Name:

CVE-2009-0477 (CCN-48574)

Assigned:

2009-02-05

Published:

2009-02-05

Updated:

2011-03-08

Summary:

Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via vectors related to the contract filesystem.

CVSS v3 Severity:

9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2009-0477

Source: CCN
Type: Sun Alert ID: 244026
Security Vulnerability in the Process File System (proc(4)) Relating to Contract File System (contract(4)) Interaction May Lead to a System Panic or Possible Execution of Arbitrary Code by Unprivileged Users

Source: SUNALERT
Type: Vendor Advisory
244026

Source: MISC
Type: Exploit
http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf

Source: CCN
Type: OSVDB ID: 52512
Solaris Process File System (proc(4)) Contract File System (contract(4)) Interaction Local DoS

Source: BID
Type: UNKNOWN
33654

Source: CCN
Type: BID-33654
Sun OpenSolaris Process File System Local Code Execution Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2009-0352

Source: XF
Type: UNKNOWN
solaris-procfs-code-execution(48574)

Vulnerable Configuration:

Configuration 1:

cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*

Configuration CCN 1:

cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_86::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::x86:*:*:*:*:*

Denotes that component is vulnerable