CVE-2009-2282

2009-07-0112:26:00

mitre

www.cve.org

sun solaris 10

opensolaris

vntsd daemon

guest-domain privileges

local users

authorization check

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

35.7%

JSON

The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors.