← Back

CVE-2009-1207

nvd nist
Published: Apr 1, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.4
Vector
AV:L/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 3.4 / Impact: 6.4
Source: NVD

Description

Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files.

Affected (227)

Products: Sun: Opensolaris, Solaris
Sun
2 products
Opensolaris
Solaris
Configuration A
114 vulnerable
Vulnerable SoftwareAffected Versions
Sun
Opensolaris
Version snv_01
Opensolaris
Version snv_02
Opensolaris
Version snv_03
Opensolaris
Version snv_04
Opensolaris
Version snv_05
Opensolaris
Version snv_06
Opensolaris
Version snv_07
Opensolaris
Version snv_08
Opensolaris
Version snv_09
Opensolaris
Version snv_100
Opensolaris
Version snv_101
Opensolaris
Version snv_102
Opensolaris
Version snv_103
Opensolaris
Version snv_104
Opensolaris
Version snv_105
Opensolaris
Version snv_106
Opensolaris
Version snv_107
Opensolaris
Version snv_108
Opensolaris
Version snv_109
Opensolaris
Version snv_10
Opensolaris
Version snv_110
Opensolaris
Version snv_111
Opensolaris
Version snv_11
Opensolaris
Version snv_12
Opensolaris
Version snv_13
Opensolaris
Version snv_14
Opensolaris
Version snv_15
Opensolaris
Version snv_16
Opensolaris
Version snv_17
Opensolaris
Version snv_18
Opensolaris
Version snv_19
Opensolaris
Version snv_20
Opensolaris
Version snv_21
Opensolaris
Version snv_22
Opensolaris
Version snv_23
Opensolaris
Version snv_24
Opensolaris
Version snv_25
Opensolaris
Version snv_26
Opensolaris
Version snv_27
Opensolaris
Version snv_28
Opensolaris
Version snv_29
Opensolaris
Version snv_30
Opensolaris
Version snv_31
Opensolaris
Version snv_32
Opensolaris
Version snv_33
Opensolaris
Version snv_34
Opensolaris
Version snv_35
Opensolaris
Version snv_36
Opensolaris
Version snv_37
Opensolaris
Version snv_38
Opensolaris
Version snv_39
Opensolaris
Version snv_40
Opensolaris
Version snv_41
Opensolaris
Version snv_42
Opensolaris
Version snv_43
Opensolaris
Version snv_44
Opensolaris
Version snv_45
Opensolaris
Version snv_46
Opensolaris
Version snv_47
Opensolaris
Version snv_48
Opensolaris
Version snv_49
Opensolaris
Version snv_50
Opensolaris
Version snv_51
Opensolaris
Version snv_52
Opensolaris
Version snv_53
Opensolaris
Version snv_54
Opensolaris
Version snv_55
Opensolaris
Version snv_56
Opensolaris
Version snv_57
Opensolaris
Version snv_58
Opensolaris
Version snv_59
Opensolaris
Version snv_60
Opensolaris
Version snv_61
Opensolaris
Version snv_62
Opensolaris
Version snv_63
Opensolaris
Version snv_64
Opensolaris
Version snv_65
Opensolaris
Version snv_66
Opensolaris
Version snv_67
Opensolaris
Version snv_68
Opensolaris
Version snv_69
Opensolaris
Version snv_70
Opensolaris
Version snv_71
Opensolaris
Version snv_72
Opensolaris
Version snv_73
Opensolaris
Version snv_74
Opensolaris
Version snv_75
Opensolaris
Version snv_76
Opensolaris
Version snv_77
Opensolaris
Version snv_78
Opensolaris
Version snv_79
Opensolaris
Version snv_80
Opensolaris
Version snv_81
Opensolaris
Version snv_82
Opensolaris
Version snv_83
Opensolaris
Version snv_84
Opensolaris
Version snv_85
Opensolaris
Version snv_86
Opensolaris
Version snv_87
Opensolaris
Version snv_88
Opensolaris
Version snv_89
Opensolaris
Version snv_90
Opensolaris
Version snv_91
Opensolaris
Version snv_92
Opensolaris
Version snv_93
Opensolaris
Version snv_94
Opensolaris
Version snv_95
Opensolaris
Version snv_96
Opensolaris
Version snv_97
Opensolaris
Version snv_98
Opensolaris
Version snv_99
Sun
Solaris
Version 10
Solaris
Version 8
Solaris
Version 9
Configuration B
113 vulnerable
Vulnerable SoftwareAffected Versions
Sun
Opensolaris
Version snv_01
Opensolaris
Version snv_02
Opensolaris
Version snv_03
Opensolaris
Version snv_04
Opensolaris
Version snv_05
Opensolaris
Version snv_06
Opensolaris
Version snv_07
Opensolaris
Version snv_08
Opensolaris
Version snv_09
Opensolaris
Version snv_100
Opensolaris
Version snv_101
Opensolaris
Version snv_102
Opensolaris
Version snv_103
Opensolaris
Version snv_104
Opensolaris
Version snv_105
Opensolaris
Version snv_106
Opensolaris
Version snv_107
Opensolaris
Version snv_108
Opensolaris
Version snv_109
Opensolaris
Version snv_10
Opensolaris
Version snv_110
Opensolaris
Version snv_11
Opensolaris
Version snv_12
Opensolaris
Version snv_13
Opensolaris
Version snv_14
Opensolaris
Version snv_15
Opensolaris
Version snv_16
Opensolaris
Version snv_17
Opensolaris
Version snv_18
Opensolaris
Version snv_19
Opensolaris
Version snv_20
Opensolaris
Version snv_21
Opensolaris
Version snv_22
Opensolaris
Version snv_23
Opensolaris
Version snv_24
Opensolaris
Version snv_25
Opensolaris
Version snv_26
Opensolaris
Version snv_27
Opensolaris
Version snv_28
Opensolaris
Version snv_29
Opensolaris
Version snv_30
Opensolaris
Version snv_31
Opensolaris
Version snv_32
Opensolaris
Version snv_33
Opensolaris
Version snv_34
Opensolaris
Version snv_35
Opensolaris
Version snv_36
Opensolaris
Version snv_37
Opensolaris
Version snv_38
Opensolaris
Version snv_39
Opensolaris
Version snv_40
Opensolaris
Version snv_41
Opensolaris
Version snv_42
Opensolaris
Version snv_43
Opensolaris
Version snv_44
Opensolaris
Version snv_45
Opensolaris
Version snv_46
Opensolaris
Version snv_47
Opensolaris
Version snv_48
Opensolaris
Version snv_49
Opensolaris
Version snv_50
Opensolaris
Version snv_51
Opensolaris
Version snv_52
Opensolaris
Version snv_53
Opensolaris
Version snv_54
Opensolaris
Version snv_55
Opensolaris
Version snv_56
Opensolaris
Version snv_57
Opensolaris
Version snv_58
Opensolaris
Version snv_59
Opensolaris
Version snv_60
Opensolaris
Version snv_61
Opensolaris
Version snv_62
Opensolaris
Version snv_63
Opensolaris
Version snv_64
Opensolaris
Version snv_65
Opensolaris
Version snv_66
Opensolaris
Version snv_67
Opensolaris
Version snv_68
Opensolaris
Version snv_69
Opensolaris
Version snv_70
Opensolaris
Version snv_71
Opensolaris
Version snv_72
Opensolaris
Version snv_73
Opensolaris
Version snv_74
Opensolaris
Version snv_75
Opensolaris
Version snv_76
Opensolaris
Version snv_77
Opensolaris
Version snv_78
Opensolaris
Version snv_79
Opensolaris
Version snv_80
Opensolaris
Version snv_81
Opensolaris
Version snv_82
Opensolaris
Version snv_83
Opensolaris
Version snv_84
Opensolaris
Version snv_85
Opensolaris
Version snv_86
Opensolaris
Version snv_87
Opensolaris
Version snv_88
Opensolaris
Version snv_89
Opensolaris
Version snv_90
Opensolaris
Version snv_91
Opensolaris
Version snv_92
Opensolaris
Version snv_93
Opensolaris
Version snv_94
Opensolaris
Version snv_95
Opensolaris
Version snv_96
Opensolaris
Version snv_97
Opensolaris
Version snv_98
Opensolaris
Version snv_99
Sun
Solaris
Version 10
Solaris
Version 8
Solaris
Version 9

Related CWEs

CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (18)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.