CVE-2009-3000

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-28 · updated 2026-06-16
Weakness: CWE-399

Description

The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to "improper http response handling."

Affected products

Sun Opensolaris: snv_41, snv_42, snv_43, snv_44, snv_45, snv_46 (+76)
Sun Solaris: 10.0

References

http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1

Get alerted when CVE-2009-3000 or the next vulnerability affects your stack