Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2009-0477: Sun OpenSolaris proc filesystem lets local users gain extra rights

CVE-2009-0477 · published 17 years ago

Summary

The proc virtual file system in Sun OpenSolaris versions snv_85 through snv_100 can be tricked by a local user to obtain higher system privileges. This could let an attacker perform actions normally reserved for administrators. Apply the vendor-provided patches or upgrade to a version newer than snv_100 to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sun	opensolaris	snv_99 snv_100 snv_85 snv_86 snv_87 snv_88 snv_89 snv_90 snv_91 snv_92 snv_93 snv_94 4 more version ranges `cpe:2.3:o:sun:opensolaris:snv_99::x86:::::`

Original advisory text

Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via vectors related to the contract filesystem.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.2 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-264Permissions, Privileges, and Access Controls

Timeline

Published8 Feb 2009

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2009-0477 · NVD

Track software like this

Free during beta