CVE-2009-4211 | BDVDB-2026-39509 Detail

Description#

The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/433821
http://securitytracker.com/id?1023265
http://www.securityfocus.com/bid/37200
http://www.securityfocus.com/archive/1/508188/100/0/threaded

Exploit#

No public exploit known

History#

Version 12009-12-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.