Vulnerability CVE-2009-2387 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2387 (CCN-51566)

Assigned:

2009-07-06

Published:

2009-07-06

Updated:

2009-07-22

Summary:

Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv_49 through snv_109 allows local users to cause a denial of service (deadlock and panic) via unknown vectors, related to the ldt_rewrite_syscall function.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2009-2387

Source: CCN
Type: Sun Alert ID: 258888
A Security Vulnerability Involving the OpenSolaris Process File System (proc(4)) May Allow an Unprivileged Local User to Panic the System

Source: SUNALERT
Type: Patch, Vendor Advisory
258888

Source: CCN
Type: OSVDB ID: 55771
OpenSolaris proc Filesystem ldt_rewrite_syscall Function Local DoS

Source: BID
Type: UNKNOWN
35588

Source: CCN
Type: BID-35588
Sun OpenSolaris Process File System (proc(4)) Local Denial Of Service Vulnerability

Source: XF
Type: UNKNOWN
opensolaris-proc-dos(51566)

Vulnerable Configuration:

Configuration 1:

cpe:/o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*

Configuration CCN 1:

cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_64::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_79b::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_50::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_53::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_54::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_56::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_58::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_59::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_60::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_62::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_65::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_68::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_69::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_72::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_75::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_76::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_78::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_81::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_82::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_84::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_49::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_51::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_52::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_55::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_57::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_61::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_63::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_66::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_67::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_70::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_71::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_73::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_74::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_77::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_79::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_83::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_102::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_80::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_104::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_101::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_105::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_103::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_106::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_107::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_108::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_109::x86:*:*:*:*:*

Denotes that component is vulnerable