CVEvulnerability

CVE-2009-2644

4.9 MEDIUM Published 2009-07-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-07-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-362

Description

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."

Affected configurations

• sun opensolaris snv 01 • sun opensolaris snv 02 • sun opensolaris snv 03 • sun opensolaris snv 04 • sun opensolaris snv 05 • sun opensolaris snv 06 • sun opensolaris snv 07 • sun opensolaris snv 08 • sun opensolaris snv 09 • sun opensolaris snv 10 • sun opensolaris snv 11 • sun opensolaris snv 12 • sun opensolaris snv 13 • sun opensolaris snv 14 • sun opensolaris snv 15 • sun opensolaris snv 16 • sun opensolaris snv 17 • sun opensolaris snv 18 • sun opensolaris snv 19 • sun opensolaris snv 20 • sun opensolaris snv 21 • sun opensolaris snv 22 • sun opensolaris snv 23 • sun opensolaris snv 24 • sun opensolaris snv 25 • sun opensolaris snv 26 • sun opensolaris snv 27 • sun opensolaris snv 28 • sun opensolaris snv 29 • sun opensolaris snv 30 • sun opensolaris snv 31 • sun opensolaris snv 32 • sun opensolaris snv 33 • sun opensolaris snv 34 • sun opensolaris snv 35 • sun opensolaris snv 36 • sun opensolaris snv 37 • sun opensolaris snv 38 • sun opensolaris snv 39 • sun opensolaris snv 40 • sun opensolaris snv 41 • sun opensolaris snv 42 • sun opensolaris snv 43 • sun opensolaris snv 44 • sun opensolaris snv 45 • sun opensolaris snv 46 • sun opensolaris snv 47 • sun opensolaris snv 48 • sun opensolaris snv 49 • sun opensolaris snv 50 • sun opensolaris snv 51 • sun opensolaris snv 52 • sun opensolaris snv 53 • sun opensolaris snv 54 • sun opensolaris snv 55 • sun opensolaris snv 56 • sun opensolaris snv 57 • sun opensolaris snv 58 • sun opensolaris snv 59 • sun opensolaris snv 60 … and 63 more

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References