CVE-2009-4211

no score yetEPSS 1.7%

disa srr for solaris: no CVSS score yet. EPSS 1.7% chance of exploitation in the next 30 days.

The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-12-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

disa:srr_for_solaris

References

http://securitytracker.com/id?1023265
http://www.kb.cert.org/vuls/id/433821
http://www.securityfocus.com/archive/1/508188/100/0/threaded
http://www.securityfocus.com/bid/37200
http://securitytracker.com/id?1023265

Check your stack JSON