CVE-2009-4211

Published: Dec 4, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.

Affected (1)

Products: Disa: Srr For Solaris

1 product

Srr For Solaris

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Disa Srr For Solaris	All versions

Running on/with	Platform Versions
Sun Solaris	All versions

Related CWEs

References (8)

http://securitytracker.com/id?1023265

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/433821

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/508188/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/37200

Source: cve@mitre.org

http://securitytracker.com/id?1023265

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/433821

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/508188/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37200

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.