10

CVE-2009-2296: sun opensolaris

CVSS: 10.0v2.0HighModified
Published 02-07-2009Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2009-2296 is a high (CVSS 10.0) vulnerability in sun opensolaris. EPSS estimates a 4.41% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
4.41%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 02-07-2009
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

4.41%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.41% on 22-09-2026

22-09-202622-10-2026
EPSS score
4.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Sun2 products
  • opensolaris≤ snv_95 | ≤ snv_118 | snv_01 | snv_02 | snv_03 | snv_04 | snv_05 | snv_06 | snv_07 | snv_08 | snv_09 | snv_10 | snv_11 | snv_12 | snv_13 | snv_14 | snv_15 | snv_16 | snv_17 | snv_18 | snv_19 | snv_20 | snv_21 | snv_22 | snv_23 | snv_24 | snv_25 | snv_26 | snv_27 | snv_28 | snv_29 | snv_30 | snv_31 | snv_32 | snv_33 | snv_34 | snv_35 | snv_36 | snv_37 | snv_38 | snv_39 | snv_40 | snv_41 | snv_42 | snv_43 | snv_44 | snv_45 | snv_46 | snv_47 | snv_48 | snv_49 | snv_50 | snv_51 | snv_52 | snv_53 | snv_54 | snv_55 | snv_56 | snv_57 | snv_58 | snv_59 | snv_60 | snv_61 | snv_62 | snv_63 | snv_64 | snv_65 | snv_66 | snv_67 | snv_68 | snv_69 | snv_70 | snv_71 | snv_72 | snv_73 | snv_74 | snv_75 | snv_76 | snv_77 | snv_78 | snv_79 | snv_80 | snv_81 | snv_82 | snv_83 | snv_84 | snv_85 | snv_86 | snv_87 | snv_88 | snv_89 | snv_90 | snv_91 | snv_92 | snv_93 | snv_94 | snv_96 | snv_97 | snv_98 | snv_99 | snv_100 | snv_101 | snv_102 | snv_103 | snv_104 | snv_105 | snv_106 | snv_107 | snv_108 | snv_109 | snv_110 | snv_111 | snv_112 | snv_113 | snv_114 | snv_115 | snv_116 | snv_117
  • solaris10

1 vendor · 2 products

References

10 links