Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-1478 — Opensolaris vulnerability

4 documents4 sources

Severity

4.9MEDIUMNVD

EPSS

0.2%

top 53.68%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN Opensolaris SUN Solaris

Timeline

PublishedApr 29

Latest updateMay 2

Description

Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via unknown vectors.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages2 packages

▶NVDsun/opensolaris113 versions+112

▶NVDsun/solaris10

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-f422-cx65-4889: Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a deni↗2022-05-02

▶

CVEList

CVE-2009-1478: Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a deni↗2009-04-29

▶

💥Exploits & PoCs

Exploit-DB

Solaris 10 / OpenSolaris - 'dtrace' Local Kernel Denial of Service (PoC)↗2009-05-04

▶