CVE-2009-4211

2009-12-0422:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.