Vulnerability Name:

CVE-2009-0926 (CCN-49283)

Assigned:2009-03-16
Published:2009-03-16
Updated:2017-08-17
Summary:Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through snv_91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service (panic) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6679732.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2009-0926

Source: CCN
Type: SA34331
Sun Solaris UFS File System Denial of Service

Source: SECUNIA
Type: UNKNOWN
34331

Source: CCN
Type: SECTRACK ID: 1021850
Solaris ufs_getpage() and ufs_putpage() Bugs Lets Local Users Deny Service

Source: CCN
Type: Sun Alert ID: 254628
Security Vulnerabilities in the UFS File System Relating to ufs_getpage() and ufs_putpage() Routines May Allow a Local User to Hang or Panic the System

Source: SUNALERT
Type: Vendor Advisory
254628

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm

Source: CCN
Type: ASA-2009-103
Security Vulnerabilities in the UFS File System Relating to ufs_getpage() and ufs_putpage() Routines May Allow a Local User to Hang or Panic the System (Sun 254628)

Source: CCN
Type: OSVDB ID: 52972
OpenSolaris 32-bit UFS Filesystem Functionality ufs_getpage / ufs_putapage Routines Unspecified Local DoS (6679732)

Source: BID
Type: UNKNOWN
34137

Source: CCN
Type: BID-34137
Sun Solaris UFS File System Multiple Local Denial Of Service Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1021850

Source: VUPEN
Type: UNKNOWN
ADV-2009-0742

Source: VUPEN
Type: UNKNOWN
ADV-2009-0876

Source: XF
Type: UNKNOWN
solaris-ufs-filesystem-32bit-dos(49283)

Source: XF
Type: UNKNOWN
solaris-ufs-filesystem-32bit-dos(49283)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:build_snv_39:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:10::x86:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun opensolaris build_snv_39
    sun opensolaris snv_40
    sun opensolaris snv_41
    sun opensolaris snv_42
    sun opensolaris snv_43
    sun opensolaris snv_44
    sun opensolaris snv_86
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_47
    sun opensolaris snv_48
    sun opensolaris snv_49
    sun opensolaris snv_50
    sun opensolaris snv_51
    sun opensolaris snv_52
    sun opensolaris snv_53
    sun opensolaris snv_54
    sun opensolaris snv_55
    sun opensolaris snv_56
    sun opensolaris snv_57
    sun opensolaris snv_58
    sun opensolaris snv_59
    sun opensolaris snv_60
    sun opensolaris snv_61
    sun opensolaris snv_62
    sun opensolaris snv_63
    sun opensolaris snv_64
    sun opensolaris snv_65
    sun opensolaris snv_66
    sun opensolaris snv_67
    sun opensolaris snv_68
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun solaris 10
    sun opensolaris build_snv_89
    sun opensolaris build_snv_88
    sun opensolaris build_snv_87
    sun opensolaris build_snv_86
    sun opensolaris build_snv_91
    sun opensolaris build_snv_90
    sun solaris 10