CVE-2009-0875: Race Condition
Published Mar 12, 2009
·Updated
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is transferred from a caller to a door server.
Affected Software
192 affected components
Sun OpenSolaris=snv_33
Sun Solaris=8
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_87
Sun Solaris=9
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_59
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_01
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_51
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_86
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_67
Sun OpenSolaris<=snv_93
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_41
Sun Solaris=10
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_14
Sun OpenSolaris=snv_35
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_36
Sun OpenSolaris=snv_30
Sun OpenSolaris=snv_70
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_85
Sun OpenSolaris=snv_26
Sun OpenSolaris=snv_50
Sun OpenSolaris=snv_72
Sun OpenSolaris=snv_67
Sun OpenSolaris=snv_87
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_01
Sun Solaris=9
Sun OpenSolaris=snv_77
Sun OpenSolaris=snv_18
Sun OpenSolaris=snv_53
Sun OpenSolaris=snv_41
Sun OpenSolaris=snv_11
Sun OpenSolaris=snv_39
Sun OpenSolaris=snv_23
Sun OpenSolaris=snv_80
Sun OpenSolaris=snv_07
Sun OpenSolaris=snv_55
Sun OpenSolaris=snv_24
Sun OpenSolaris=snv_31
Sun OpenSolaris=snv_04
Sun OpenSolaris=snv_58
Sun OpenSolaris=snv_05
Sun OpenSolaris=snv_84
Sun OpenSolaris=snv_65
Sun OpenSolaris=snv_17
Sun OpenSolaris=snv_86
Sun OpenSolaris=snv_62
Sun OpenSolaris=snv_35
Sun Solaris=8
Sun OpenSolaris=snv_09
Sun OpenSolaris=snv_34
Sun OpenSolaris=snv_66
Sun OpenSolaris=snv_44
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_29
Sun OpenSolaris=snv_59
Sun Solaris=10
Sun OpenSolaris=snv_10
Sun OpenSolaris=snv_78
Sun OpenSolaris=snv_43
Sun OpenSolaris=snv_48
Sun OpenSolaris=snv_25
Sun OpenSolaris=snv_79
Sun OpenSolaris=snv_63
Sun OpenSolaris=snv_37
Sun OpenSolaris=snv_40
Sun OpenSolaris=snv_45
Sun OpenSolaris=snv_13
Sun OpenSolaris=snv_06
Sun OpenSolaris=snv_52
Sun OpenSolaris=snv_16
Sun OpenSolaris=snv_69
Sun OpenSolaris=snv_46
Sun OpenSolaris=snv_71
Sun OpenSolaris=snv_64
Sun OpenSolaris=snv_20
Sun OpenSolaris=snv_82
Sun OpenSolaris=snv_14
Sun OpenSolaris<=snv_93
Sun OpenSolaris=snv_57
Sun OpenSolaris=snv_60
Sun OpenSolaris=snv_03
Sun OpenSolaris=snv_75
Sun OpenSolaris=snv_81
Sun OpenSolaris=snv_19
Sun OpenSolaris=snv_21
Sun OpenSolaris=snv_47
Sun OpenSolaris=snv_49
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_73
Sun OpenSolaris=snv_15
Sun OpenSolaris=snv_02
Sun OpenSolaris=snv_08
Sun OpenSolaris=snv_61
Sun OpenSolaris=snv_83
Sun OpenSolaris=snv_68
Sun OpenSolaris=snv_28
Sun OpenSolaris=snv_27
Sun OpenSolaris=snv_32
Sun OpenSolaris=snv_56
Sun OpenSolaris=snv_42
Sun OpenSolaris=snv_74
Sun OpenSolaris=snv_33
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_22
Sun OpenSolaris=snv_76
Sun OpenSolaris=snv_54
Sun OpenSolaris=snv_12
Sun OpenSolaris=snv_38
Sun OpenSolaris=snv_51
Remediation
Event History
Mar 12, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:20 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0875?
CVE-2009-0875 has a moderate severity level due to its potential to cause denial of service and privilege escalation.
2
How do I fix CVE-2009-0875?
To fix CVE-2009-0875, apply the latest patches provided by Oracle for affected Solaris versions.
3
What systems are affected by CVE-2009-0875?
CVE-2009-0875 affects Sun Solaris versions 8 through 10 and OpenSolaris versions prior to snv_94.
4
What type of vulnerability is CVE-2009-0875?
CVE-2009-0875 is a race condition vulnerability found in the Doors subsystem of the Solaris kernel.
5
Can CVE-2009-0875 be exploited remotely?
No, CVE-2009-0875 can only be exploited locally by users with specific access to the system.