CVE-2009-3101 — MEDIUM (4.9)

Vulnerability Description

xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CPU consumption and console hang) by locking the screen, related to a regression in certain Solaris and OpenSolaris patches.

CVSS Score

4.9

MEDIUM

AV:L/AC:L/Au:N/C:N/I:N/A:C

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Sun	Opensolaris	snv_109
Sun	Solaris	9

Related Weaknesses (CWE)

CWE-399

References

http://bugs.opensolaris.org/view_bug.do?bug_id=6839026Exploit
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1Vendor Advisory
http://bugs.opensolaris.org/view_bug.do?bug_id=6839026Exploit
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1Vendor Advisory

FAQ

What is CVE-2009-3101?

CVE-2009-3101 is a vulnerability with a CVSS score of 4.9 (MEDIUM). xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CP...

How severe is CVE-2009-3101?

CVE-2009-3101 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-3101?

Check the references section above for vendor advisories and patch information. Affected products include: Sun Opensolaris, Sun Solaris.