Vulnerability Details : CVE-2009-4075
Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv_99 through snv_123, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors that trigger a "dangling sshd authentication thread."
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2009-4075
Probability of exploitation activity in the next 30 days: 1.84%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 87 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2009-4075
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
[email protected] |
References for CVE-2009-4075
-
http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1
Patch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/54401
-
http://www.vupen.com/english/advisories/2009/3333
-
http://www.securityfocus.com/bid/37116
Patch
-
http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1
Patch;Vendor Advisory
Products affected by CVE-2009-4075
- cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*