Vulnerabilities > CVE-2009-0132 - Numeric Errors vulnerability in SUN Opensolaris and Solaris

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
local
low complexity
sun
CWE-189
nessus

Summary

Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument).

Vulnerable Configurations

Part Description Count
OS
Sun
8

Common Weakness Enumeration (CWE)

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_121394.NASL
    descriptionSunOS 5.10 kaio and aio_impl.h patch. Date this patch was last updated by Sun : Feb/27/09
    last seen2018-09-01
    modified2018-08-13
    plugin id35407
    published2009-01-19
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=35407
    titleSolaris 10 (sparc) : 121394-03
    code
    #%NASL_MIN_LEVEL 80502
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/09/17.
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(35407);
     script_version("1.15");
    
     script_name(english: "Solaris 10 (sparc) : 121394-03");
     script_cve_id("CVE-2009-0132");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 121394-03");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.10 kaio and aio_impl.h patch.
    Date this patch was last updated by Sun : Feb/27/09');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "https://getupdates.oracle.com/readme/121394-03");
     script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C");
     script_cwe_id(189);
     script_set_attribute(attribute:"plugin_publication_date", value: "2009/01/19");
     script_cvs_date("Date: 2019/10/25 13:36:25");
     script_end_attributes();
    
     script_summary(english: "Check for patch 121394-03");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_X86_138578.NASL
    descriptionSunOS 5.9_x86: kernel/sys/kaio patch. Date this patch was last updated by Sun : Jan/07/09
    last seen2020-06-01
    modified2020-06-02
    plugin id35423
    published2009-01-19
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/35423
    titleSolaris 9 (x86) : 138578-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_X86_117351.NASL
    descriptionSunOS 5.8_x86: kernel patch. Date this patch was last updated by Sun : Mar/09/09
    last seen2020-06-01
    modified2020-06-02
    plugin id20947
    published2006-02-19
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/20947
    titleSolaris 8 (x86) : 117351-61
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_117350.NASL
    descriptionSunOS 5.8: kernel patch. Date this patch was last updated by Sun : Apr/21/09
    last seen2020-06-01
    modified2020-06-02
    plugin id20945
    published2006-02-19
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/20945
    titleSolaris 8 (sparc) : 117350-62
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_138577.NASL
    descriptionSunOS 5.9: kernel/sys/kaio patch. Date this patch was last updated by Sun : Jan/07/09
    last seen2020-06-01
    modified2020-06-02
    plugin id35420
    published2009-01-19
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/35420
    titleSolaris 9 (sparc) : 138577-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_121395.NASL
    descriptionSunOS 5.10_x86 kaio and aio_impl.h patch. Date this patch was last updated by Sun : Feb/27/09
    last seen2018-09-01
    modified2018-08-13
    plugin id35413
    published2009-01-19
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=35413
    titleSolaris 10 (x86) : 121395-03