CVE-2009-3706

Published: Oct 16, 2009Modified: Apr 23, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the file_chown_self privilege via certain uses of the chown system call.

Affected (39)

Products: Sun: Opensolaris, Solaris

Sun

2 products

Opensolaris

Solaris

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sun Opensolaris	Version snv_100
Sun Opensolaris	Version snv_101
Sun Opensolaris	Version snv_102
Sun Opensolaris	Version snv_103
Sun Opensolaris	Version snv_104
Sun Opensolaris	Version snv_105
Sun Opensolaris	Version snv_106
Sun Opensolaris	Version snv_107
Sun Opensolaris	Version snv_108
Sun Opensolaris	Version snv_109
Sun Opensolaris	Version snv_110
Sun Opensolaris	Version snv_111
Sun Opensolaris	Version snv_112
Sun Opensolaris	Version snv_113
Sun Opensolaris	Version snv_114
Sun Opensolaris	Version snv_115
Sun Opensolaris	Version snv_116
Sun Opensolaris	Version snv_117
Sun Solaris	Version 10.0
Sun Solaris	Version 10

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Sun Opensolaris	Version snv_100
Sun Opensolaris	Version snv_101
Sun Opensolaris	Version snv_102
Sun Opensolaris	Version snv_103
Sun Opensolaris	Version snv_104
Sun Opensolaris	Version snv_105
Sun Opensolaris	Version snv_106
Sun Opensolaris	Version snv_107
Sun Opensolaris	Version snv_108
Sun Opensolaris	Version snv_109
Sun Opensolaris	Version snv_110
Sun Opensolaris	Version snv_111
Sun Opensolaris	Version snv_112
Sun Opensolaris	Version snv_113
Sun Opensolaris	Version snv_114
Sun Opensolaris	Version snv_115
Sun Opensolaris	Version snv_116
Sun Opensolaris	Version snv_117
Sun Solaris	Version 10