CVE-2009-3839 Code injection in n/a
Remote attackers with X server access can execute arbitrary code in Solaris Trusted Extensions Policy configuration.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-3839?
CVE-2009-3839 is a medium-severity code injection vulnerability in Sun Opensolaris, published on 2 Nov 2009. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute arbitrary code by leveraging access to the X server.
Which versions are affected by CVE-2009-3839?
It affects 2 products.
Products include Sun Opensolaris, Sun Solaris.
How do I fix CVE-2009-3839?
No fix has been published for CVE-2009-3839 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2009-3839 being exploited?
There is no known exploitation of CVE-2009-3839 in the wild and no public exploit code.
Other vulnerabilities in Sun Opensolaris
Sources
Also known as GHSA-hj64-h8r7-f2qx.