What’s Vulnerable › Vulnerabilities

CVE-2009-0477

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-02-08 · updated 2026-06-16
• Weakness: CWE-264

Description

Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via vectors related to the contract filesystem.

Affected products

• Sun Opensolaris: snv_85, snv_86, snv_87, snv_88, snv_89, snv_90 (+10)

References

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1
• http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf
• http://www.securityfocus.com/bid/33654
• http://www.vupen.com/english/advisories/2009/0352
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1
• http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf
• http://www.securityfocus.com/bid/33654
• http://www.vupen.com/english/advisories/2009/0352

Get alerted when CVE-2009-0477 or the next vulnerability affects your stack