Vulnerabilities > CVE-2009-1478 - Local Denial of Service vulnerability in SUN Opensolaris and Solaris
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
COMPLETE Summary
Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via unknown vectors.
Vulnerable Configurations
Exploit-Db
description | Solaris 10 / OpenSolaris (dtrace) Local Kernel Denial of Service PoC. CVE-2009-1478. Dos exploit for solaris platform |
id | EDB-ID:8597 |
last seen | 2016-02-01 |
modified | 2009-05-04 |
published | 2009-05-04 |
reporter | mu-b |
source | https://www.exploit-db.com/download/8597/ |
title | Solaris 10 / OpenSolaris dtrace Local Kernel Denial of Service PoC |
Nessus
NASL family Solaris Local Security Checks NASL id SOLARIS10_141765-01.NASL description SunOS 5.10: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09 last seen 2020-06-01 modified 2020-06-02 plugin id 107530 published 2018-03-12 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/107530 title Solaris 10 (sparc) : 141765-01 code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text in this plugin was # extracted from the Oracle SunOS Patch Updates. # include("compat.inc"); if (description) { script_id(107530); script_version("1.7"); script_cvs_date("Date: 2019/10/25 13:36:25"); script_cve_id("CVE-2009-1478"); script_name(english:"Solaris 10 (sparc) : 141765-01"); script_summary(english:"Check for patch 141765-01"); script_set_attribute( attribute:"synopsis", value:"The remote host is missing Sun Security Patch number 141765-01" ); script_set_attribute( attribute:"description", value: "SunOS 5.10: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09" ); script_set_attribute( attribute:"see_also", value:"https://download.oracle.com/sunalerts/1020403.1.html" ); script_set_attribute(attribute:"solution", value:"Install patch 141765-01"); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:solaris:10:141765"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:solaris:10"); script_set_attribute(attribute:"patch_publication_date", value:"2009/06/03"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/12"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Solaris Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("solaris.inc"); showrev = get_kb_item("Host/Solaris/showrev"); if (empty_or_null(showrev)) audit(AUDIT_OS_NOT, "Solaris"); os_ver = pregmatch(pattern:"Release: (\d+.(\d+))", string:showrev); if (empty_or_null(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Solaris"); full_ver = os_ver[1]; os_level = os_ver[2]; if (full_ver != "5.10") audit(AUDIT_OS_NOT, "Solaris 10", "Solaris " + os_level); package_arch = pregmatch(pattern:"Application architecture: (\w+)", string:showrev); if (empty_or_null(package_arch)) audit(AUDIT_UNKNOWN_ARCH); package_arch = package_arch[1]; if (package_arch != "sparc") audit(AUDIT_ARCH_NOT, "sparc", package_arch); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (solaris_check_patch(release:"5.10", arch:"sparc", patch:"141765-01", obsoleted_by:"143941-02 147440-06 141590-01 147147-26 146575-03 ", package:"SUNWdtrp", version:"11.10.0,REV=2005.01.21.15.53") < 0) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : solaris_get_report() ); } else { patch_fix = solaris_patch_fix_get(); if (!empty_or_null(patch_fix)) audit(AUDIT_PATCH_INSTALLED, patch_fix, "Solaris 10"); tested = solaris_pkg_tests_get(); if (!empty_or_null(tested)) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); audit(AUDIT_PACKAGE_NOT_INSTALLED, "SUNWdtrp"); }
NASL family Solaris Local Security Checks NASL id SOLARIS10_X86_141766.NASL description SunOS 5.10_x86: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09 last seen 2018-09-02 modified 2018-08-13 plugin id 39417 published 2009-06-16 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=39417 title Solaris 10 (x86) : 141766-01 code #%NASL_MIN_LEVEL 80502 # @DEPRECATED@ # # This script has been deprecated as the associated patch is not # currently a recommended security fix. # # Disabled on 2011/10/24. # # # (C) Tenable Network Security, Inc. # # if ( ! defined_func("bn_random") ) exit(0); include("compat.inc"); if(description) { script_id(39417); script_version("1.16"); script_name(english: "Solaris 10 (x86) : 141766-01"); script_cve_id("CVE-2009-1478"); script_set_attribute(attribute: "synopsis", value: "The remote host is missing Sun Security Patch number 141766-01"); script_set_attribute(attribute: "description", value: 'SunOS 5.10_x86: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09'); script_set_attribute(attribute: "solution", value: "You should install this patch for your system to be up-to-date."); script_set_attribute(attribute: "see_also", value: "http://download.oracle.com/sunalerts/1020403.1.html"); script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C"); script_set_attribute(attribute:"plugin_publication_date", value: "2009/06/16"); script_cvs_date("Date: 2019/10/25 13:36:25"); script_end_attributes(); script_summary(english: "Check for patch 141766-01"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc."); family["english"] = "Solaris Local Security Checks"; script_family(english:family["english"]); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/Solaris/showrev"); exit(0); } # Deprecated. exit(0, "The associated patch is not currently a recommended security fix.");
NASL family Solaris Local Security Checks NASL id SOLARIS10_X86_141766-01.NASL description SunOS 5.10_x86: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09 last seen 2020-06-01 modified 2020-06-02 plugin id 108029 published 2018-03-12 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108029 title Solaris 10 (x86) : 141766-01 code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text in this plugin was # extracted from the Oracle SunOS Patch Updates. # include("compat.inc"); if (description) { script_id(108029); script_version("1.7"); script_cvs_date("Date: 2019/10/25 13:36:25"); script_cve_id("CVE-2009-1478"); script_name(english:"Solaris 10 (x86) : 141766-01"); script_summary(english:"Check for patch 141766-01"); script_set_attribute( attribute:"synopsis", value:"The remote host is missing Sun Security Patch number 141766-01" ); script_set_attribute( attribute:"description", value: "SunOS 5.10_x86: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09" ); script_set_attribute( attribute:"see_also", value:"https://download.oracle.com/sunalerts/1020403.1.html" ); script_set_attribute(attribute:"solution", value:"Install patch 141766-01"); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:solaris:10:141766"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:solaris:10"); script_set_attribute(attribute:"patch_publication_date", value:"2009/06/03"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/12"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Solaris Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("solaris.inc"); showrev = get_kb_item("Host/Solaris/showrev"); if (empty_or_null(showrev)) audit(AUDIT_OS_NOT, "Solaris"); os_ver = pregmatch(pattern:"Release: (\d+.(\d+))", string:showrev); if (empty_or_null(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Solaris"); full_ver = os_ver[1]; os_level = os_ver[2]; if (full_ver != "5.10") audit(AUDIT_OS_NOT, "Solaris 10", "Solaris " + os_level); package_arch = pregmatch(pattern:"Application architecture: (\w+)", string:showrev); if (empty_or_null(package_arch)) audit(AUDIT_UNKNOWN_ARCH); package_arch = package_arch[1]; if (package_arch != "i386") audit(AUDIT_ARCH_NOT, "i386", package_arch); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (solaris_check_patch(release:"5.10_x86", arch:"i386", patch:"141766-01", obsoleted_by:"141591-01 142910-17 142901-09 ", package:"SUNWdtrp", version:"11.10.0,REV=2005.01.21.16.34") < 0) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : solaris_get_report() ); } else { patch_fix = solaris_patch_fix_get(); if (!empty_or_null(patch_fix)) audit(AUDIT_PATCH_INSTALLED, patch_fix, "Solaris 10"); tested = solaris_pkg_tests_get(); if (!empty_or_null(tested)) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); audit(AUDIT_PACKAGE_NOT_INSTALLED, "SUNWdtrp"); }
NASL family Solaris Local Security Checks NASL id SOLARIS10_141765.NASL description SunOS 5.10: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09 last seen 2018-09-01 modified 2018-08-13 plugin id 39309 published 2009-06-04 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=39309 title Solaris 10 (sparc) : 141765-01 code #%NASL_MIN_LEVEL 80502 # @DEPRECATED@ # # This script has been deprecated as the associated patch is not # currently a recommended security fix. # # Disabled on 2011/10/24. # # # (C) Tenable Network Security, Inc. # # if ( ! defined_func("bn_random") ) exit(0); include("compat.inc"); if(description) { script_id(39309); script_version("1.15"); script_name(english: "Solaris 10 (sparc) : 141765-01"); script_cve_id("CVE-2009-1478"); script_set_attribute(attribute: "synopsis", value: "The remote host is missing Sun Security Patch number 141765-01"); script_set_attribute(attribute: "description", value: 'SunOS 5.10: fasttrap patch. Date this patch was last updated by Sun : Jun/03/09'); script_set_attribute(attribute: "solution", value: "You should install this patch for your system to be up-to-date."); script_set_attribute(attribute: "see_also", value: "http://download.oracle.com/sunalerts/1020403.1.html"); script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C"); script_set_attribute(attribute:"plugin_publication_date", value: "2009/06/04"); script_cvs_date("Date: 2019/10/25 13:36:25"); script_end_attributes(); script_summary(english: "Check for patch 141765-01"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc."); family["english"] = "Solaris Local Security Checks"; script_family(english:family["english"]); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/Solaris/showrev"); exit(0); } # Deprecated. exit(0, "The associated patch is not currently a recommended security fix.");
References
- http://osvdb.org/54138
- http://secunia.com/advisories/34836
- http://secunia.com/advisories/35098
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1
- http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm
- http://www.securityfocus.com/bid/34753
- http://www.securitytracker.com/id?1022143
- http://www.vupen.com/english/advisories/2009/1199
- http://www.vupen.com/english/advisories/2009/1378
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50220