Vulnerability Name:

CVE-2009-2488 (CCN-51774)

Assigned:2009-07-15
Published:2009-07-15
Updated:2017-09-19
Summary:Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving "file operations."
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
1.9 Low (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P)
1.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2009-2488

Source: OSVDB
Type: UNKNOWN
55876

Source: CCN
Type: SA35874
Sun Solaris NFSv4 Kernel Module Local Denial of Service

Source: SECUNIA
Type: UNKNOWN
35874

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141733-03-1

Source: CCN
Type: Sun Alert ID: 262788
Security Vulnerability in Solaris NFSv4 Kernel Module May Panic an NFSv4 Client System

Source: SUNALERT
Type: Patch, Vendor Advisory
262788

Source: CCN
Type: OSVDB ID: 55876
Solaris NFSv4 Kernel Module Client System Panic Local DoS

Source: CCN
Type: BID-35714
Sun Solaris NFS Version 4 Kernel Module Local Denial Of Service Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2009-1922

Source: XF
Type: UNKNOWN
solaris-nfsv4-kernel-dos(51774)

Source: XF
Type: UNKNOWN
solaris-nfsv4-kernel-dos(51774)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:5586

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_102::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_102::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_104::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_104::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_105::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_105::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_103::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_103::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_106::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_106::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_111::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_111::x86:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:5586
    V
    		Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10."
    2009-09-21
    BACK
    sun opensolaris snv_102
    sun opensolaris snv_102
    sun opensolaris snv_103
    sun opensolaris snv_103
    sun opensolaris snv_104
    sun opensolaris snv_104
    sun opensolaris snv_105
    sun opensolaris snv_105
    sun opensolaris snv_106
    sun opensolaris snv_106
    sun opensolaris snv_107
    sun opensolaris snv_107
    sun opensolaris snv_108
    sun opensolaris snv_108
    sun opensolaris snv_109
    sun opensolaris snv_109
    sun opensolaris snv_110
    sun opensolaris snv_110
    sun opensolaris snv_111
    sun opensolaris snv_111
    sun opensolaris snv_112
    sun opensolaris snv_112
    sun opensolaris snv_113
    sun opensolaris snv_113
    sun opensolaris snv_114
    sun opensolaris snv_114
    sun opensolaris snv_115
    sun opensolaris snv_115
    sun opensolaris snv_116
    sun opensolaris snv_116
    sun opensolaris snv_117
    sun opensolaris snv_117
    sun opensolaris snv_118
    sun opensolaris snv_118
    sun opensolaris snv_119
    sun opensolaris snv_119
    sun solaris 10
    sun solaris 10
    sun solaris 10
    sun solaris 10
    sun opensolaris build_snv_102
    sun opensolaris build_snv_102
    sun opensolaris build_snv_104
    sun opensolaris build_snv_104
    sun opensolaris build_snv_105
    sun opensolaris build_snv_105
    sun opensolaris build_snv_103
    sun opensolaris build_snv_103
    sun opensolaris build_snv_106
    sun opensolaris build_snv_106
    sun opensolaris build_snv_107
    sun opensolaris build_snv_107
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110
    sun opensolaris build_snv_111
    sun opensolaris build_snv_111