Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2009-2282

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Solaris是一款由Sun开发和维护的商业UNIX操作系统 。 逻辑域(LDom)的Solaris虚拟网络终端服务器守护程序(vntsd(1M))中存在安全漏洞，可能允许控制域中的本地非特权用户非授权访问guest域的控制台 。

AI Predicted 5.6 Difficulty: Moderate EPSS 0.39% · P32
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-2282

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Sun Solaris虚拟网络终端服务器守护程序非授权访问漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Solaris是一款由Sun开发和维护的商业UNIX操作系统 。 逻辑域(LDom)的Solaris虚拟网络终端服务器守护程序(vntsd(1M))中存在安全漏洞，可能允许控制域中的本地非特权用户非授权访问guest域的控制台 。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2009-2282

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2282

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-2282 (3)

Other References for CVE-2009-2282 (2)

Same Patch Batch · n/a · 2009-07-01 · 25 CVEs total

CVE-2009-2276 Biglle PunBB Vote For Us index.php SQL注入漏洞
CVE-2009-2293 Tutorial Share Insecure Cookie认证绕过漏洞
CVE-2009-2292 Appleple a-News 未明跨站脚本漏洞
CVE-2009-2291 Drupal LoginToboggan模块未授权访问漏洞
CVE-2009-2290 Joomla! Boy Scout Advancement 'id'参数多个SQL注入漏洞
CVE-2009-2289 arcade_trade_script index.php跨站脚本攻击漏洞
CVE-2009-2288 Nagios statuswml.cgi远程Shell命令注入漏洞
CVE-2009-2287 Linux Kernel kvm_arch_vcpu_ioctl_set_sregs()函数代码问题漏洞
CVE-2009-2286 compface缓冲区溢出漏洞
CVE-2009-2285 LibTIFF LZWDecodeCompat 远程缓冲区溢出漏洞
CVE-2009-2284 phpMyAdmin SQL书签HTML注入漏洞
CVE-2009-2283 Sun Java Web Console 跨站脚本漏洞
CVE-2008-6840 Christof_Bruyland V-webmail多个远程文件漏洞
CVE-2009-2275 cPanel 'lastvisit.html' 目录遍历漏洞
CVE-2009-2274 华为D100路由器多个安全漏洞
CVE-2009-2273 华为D100路由器加密问题漏洞
CVE-2009-2272 华为D100路由器多个安全漏洞
CVE-2009-2271 华为D100路由器多个安全漏洞
CVE-2009-2270 Dedecms uploads_edit.php 文件上传漏洞
CVE-2009-2269 Phome Empire CMS e/tool/gbook/ SQL注入漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2282

No comments yet

Leave a comment