CVE-2009-3706

Severity Score

4.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the file_chown_self privilege via certain uses of the chown system call.

Vulnerabilidad no especificada en el sistema de archivos ZFS en Sun Solaris 10 y OpenSolaris snv_100 hasta snv_117, permite a usuarios locales eludir las limitaciones de permisos de file_chown_self a través de determinados usos de la llamada al sistema chown.

*Credits: N/A

CVSS Scores

NISTv2 4.4

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-10-16 CVE Reserved
2009-10-16 CVE Published
2023-03-08 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (5)

URL	Tag	Source
http://www.securityfocus.com/bid/36702	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1	2009-10-16
http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1	2009-10-16

URL	Date	SRC
http://secunia.com/advisories/37010	2009-10-16
http://www.vupen.com/english/advisories/2009/2917	2009-10-16

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_100 Search vendor "Sun" for product "Opensolaris" and version "snv_100"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_101 Search vendor "Sun" for product "Opensolaris" and version "snv_101"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_102 Search vendor "Sun" for product "Opensolaris" and version "snv_102"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_103 Search vendor "Sun" for product "Opensolaris" and version "snv_103"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_104 Search vendor "Sun" for product "Opensolaris" and version "snv_104"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_105 Search vendor "Sun" for product "Opensolaris" and version "snv_105"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_106 Search vendor "Sun" for product "Opensolaris" and version "snv_106"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_107 Search vendor "Sun" for product "Opensolaris" and version "snv_107"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_108 Search vendor "Sun" for product "Opensolaris" and version "snv_108"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_109 Search vendor "Sun" for product "Opensolaris" and version "snv_109"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_110 Search vendor "Sun" for product "Opensolaris" and version "snv_110"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_111 Search vendor "Sun" for product "Opensolaris" and version "snv_111"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_112 Search vendor "Sun" for product "Opensolaris" and version "snv_112"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_113 Search vendor "Sun" for product "Opensolaris" and version "snv_113"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_114 Search vendor "Sun" for product "Opensolaris" and version "snv_114"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_115 Search vendor "Sun" for product "Opensolaris" and version "snv_115"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_116 Search vendor "Sun" for product "Opensolaris" and version "snv_116"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_117 Search vendor "Sun" for product "Opensolaris" and version "snv_117"		sparc		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				10 Search vendor "Sun" for product "Solaris" and version "10"		sparc		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				10.0 Search vendor "Sun" for product "Solaris" and version "10.0"		sparc		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_100 Search vendor "Sun" for product "Opensolaris" and version "snv_100"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_101 Search vendor "Sun" for product "Opensolaris" and version "snv_101"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_102 Search vendor "Sun" for product "Opensolaris" and version "snv_102"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_103 Search vendor "Sun" for product "Opensolaris" and version "snv_103"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_104 Search vendor "Sun" for product "Opensolaris" and version "snv_104"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_105 Search vendor "Sun" for product "Opensolaris" and version "snv_105"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_106 Search vendor "Sun" for product "Opensolaris" and version "snv_106"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_107 Search vendor "Sun" for product "Opensolaris" and version "snv_107"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_108 Search vendor "Sun" for product "Opensolaris" and version "snv_108"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_109 Search vendor "Sun" for product "Opensolaris" and version "snv_109"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_110 Search vendor "Sun" for product "Opensolaris" and version "snv_110"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_111 Search vendor "Sun" for product "Opensolaris" and version "snv_111"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_112 Search vendor "Sun" for product "Opensolaris" and version "snv_112"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_113 Search vendor "Sun" for product "Opensolaris" and version "snv_113"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_114 Search vendor "Sun" for product "Opensolaris" and version "snv_114"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_115 Search vendor "Sun" for product "Opensolaris" and version "snv_115"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_116 Search vendor "Sun" for product "Opensolaris" and version "snv_116"		x86		Affected
Sun Search vendor "Sun"		Opensolaris Search vendor "Sun" for product "Opensolaris"				snv_117 Search vendor "Sun" for product "Opensolaris" and version "snv_117"		x86		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				10 Search vendor "Sun" for product "Solaris" and version "10"		x86		Affected