CVE

Id
38642  
CVE No.
CVE-2009-1207  
Status
Candidate  
Description
Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files.  
Phase
Assigned (20090331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423154 38642 CVE-2009-1207 MISC:http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1  View
423155 38642 CVE-2009-1207 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm  View
423156 38642 CVE-2009-1207 SUNALERT:253468  View
423157 38642 CVE-2009-1207 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1  View
423158 38642 CVE-2009-1207 BID:34316  View
423159 38642 CVE-2009-1207 URL:http://www.securityfocus.com/bid/34316  View
423160 38642 CVE-2009-1207 OVAL:oval:org.mitre.oval:def:6183  View
423161 38642 CVE-2009-1207 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6183  View
423162 38642 CVE-2009-1207 SECUNIA:34558  View
423163 38642 CVE-2009-1207 URL:http://secunia.com/advisories/34558  View
423164 38642 CVE-2009-1207 SECUNIA:34813  View
423165 38642 CVE-2009-1207 URL:http://secunia.com/advisories/34813  View
423166 38642 CVE-2009-1207 VUPEN:ADV-2009-1105  View
423167 38642 CVE-2009-1207 URL:http://www.vupen.com/english/advisories/2009/1105  View
423168 38642 CVE-2009-1207 XF:solaris-dircmp-file-overwrite(49526)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41537 JVNDB-2009-002544 Blue Coat ProxySG の HTTP Host ヘッダにおけるアクセスコントロール回避の脆弱性 Blue Coat ProxySG の transparent interception モードが有効の際、リモートエンドポイントを決定する HTTP Host ヘッダの処理に不備があるため、Flash、Java、および Silverlight のアクセスコントロールを回避される、あるいは制限されたイントラネットのサイトに接続される脆弱性が存在します。 CVE-2009-1211 38642 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002544.html  View