CVE-2009-1170 Privilege escalation in n/a
Local users in a non-global zone can execute arbitrary code in the global zone if a global-zone user runs mdb on their process.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-1170?
CVE-2009-1170 is a medium-severity vulnerability in Sun Opensolaris, published on 30 Mar 2009. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process.
Which versions are affected by CVE-2009-1170?
It affects 1 product.
Products include Sun Opensolaris.
How do I fix CVE-2009-1170?
No fix has been published for CVE-2009-1170 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-1170 being exploited?
There is no known exploitation of CVE-2009-1170 in the wild and no public exploit code.
Other vulnerabilities in Sun Opensolaris
Sources
Also known as GHSA-9hmw-v25p-4898.