Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2009-3706
cve-2009-3706
zfs filesystem
solaris
opensolaris
local users
privilege bypass
chown system call
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.4%
Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the file_chown_self privilege via certain uses of the chown system call.
Affected configurations
Node
sunopensolarisMatchsnv_100sparc
ORsunopensolarisMatchsnv_101sparc
ORsunopensolarisMatchsnv_102sparc
ORsunopensolarisMatchsnv_103sparc
ORsunopensolarisMatchsnv_104sparc
ORsunopensolarisMatchsnv_105sparc
ORsunopensolarisMatchsnv_106sparc
ORsunopensolarisMatchsnv_107sparc
ORsunopensolarisMatchsnv_108sparc
ORsunopensolarisMatchsnv_109sparc
ORsunopensolarisMatchsnv_110sparc
ORsunopensolarisMatchsnv_111sparc
ORsunopensolarisMatchsnv_112sparc
ORsunopensolarisMatchsnv_113sparc
ORsunopensolarisMatchsnv_114sparc
ORsunopensolarisMatchsnv_115sparc
ORsunopensolarisMatchsnv_116sparc
ORsunopensolarisMatchsnv_117sparc
ORsunsolarisMatch10sparc
ORsunsolarisMatch10.0sparc
Node
sunopensolarisMatchsnv_100x86
ORsunopensolarisMatchsnv_101x86
ORsunopensolarisMatchsnv_102x86
ORsunopensolarisMatchsnv_103x86
ORsunopensolarisMatchsnv_104x86
ORsunopensolarisMatchsnv_105x86
ORsunopensolarisMatchsnv_106x86
ORsunopensolarisMatchsnv_107x86
ORsunopensolarisMatchsnv_108x86
ORsunopensolarisMatchsnv_109x86
ORsunopensolarisMatchsnv_110x86
ORsunopensolarisMatchsnv_111x86
ORsunopensolarisMatchsnv_112x86
ORsunopensolarisMatchsnv_113x86
ORsunopensolarisMatchsnv_114x86
ORsunopensolarisMatchsnv_115x86
ORsunopensolarisMatchsnv_116x86
ORsunopensolarisMatchsnv_117x86
ORsunsolarisMatch10x86
Related
cvelist
cvelist
CVE-2009-3706
2022-10-03 16:23:55
nvd
nvd
CVE-2009-3706
2009-10-16 16:30:00
prion
prion
Code injection
2009-10-16 16:30:00
nessus
nessus
Solaris 10 (sparc) : 141444-09 (deprecated)
2009-10-15 00:00:00
Solaris 10 (x86) : 141445-09 (deprecated)
2009-10-15 00:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.4%
Related for CVE-2009-3706