CVE-2009-3851

Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the "restart daemon."

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1	Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sun:solaris:10.0::sparc:::::
	cpe:2.3:o:sun:solaris:10.0::x86:::::

History

No history.

Information

Published : 2009-11-03 16:30

Updated : 2017-09-19 01:29

NVD link : CVE-2009-3851

Mitre link : CVE-2009-3851

CVE.ORG link : CVE-2009-3851

JSON object : View

Products Affected

sun

solaris

CWE

NVD-CWE-Other

{"id": "CVE-2009-3851", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-11-03T16:30:12.593", "references": [{"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the \"restart daemon.\""}, {"lang": "es", "value": "Trusted Extensions en Sun Solaris 10 interfiere con la operaci\u00f3n del comando xscreensaver-demo para la aplicaci\u00f3n XScreenSaver, lo que facilita a atacantes pr\u00f3ximos f\u00edsicamente acceder a una estaci\u00f3n desatendida en la que el bloqueo de pantalla no ha sido efectivo. Relacionado con \"restart daemon (reinicio del demonio)\"."}], "lastModified": "2017-09-19T01:29:47.627", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BF232A9-9E0A-481E-918D-65FC82EF36D8"}, {"criteria": "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C0C3793-E011-4915-8F86-CE622A2D37D1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}