Sun Solaris Secure Digital Slot Driver (sdhost(7D)) Local Code Execution Vulnerability

Bugtraq ID:	35069
Class:	Unknown
CVE:	CVE-2009-1763
Remote:	No
Local:	Yes
Published:	May 21 2009 12:00AM
Updated:	Apr 13 2015 09:10PM
Credit:	Sun
Vulnerable:	Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105
Not Vulnerable:	Sun OpenSolaris build snv_109

Sun Solaris Secure Digital Slot Driver (sdhost(7D)) Local Code Execution Vulnerability

Sun Solaris Secure Digital Slot Driver (sdhost(7D)) is prone to a local code-execution vulnerability.

Attackers may be able to exploit this issue to execute arbitrary code in the context of the kernel. Successful exploits may completely compromise the vulnerable system or cause a denial-of-service condition.

This issue affects OpenSolaris based on builds snv_105 through snv_108 on x86 platforms.

Sun Solaris Secure Digital Slot Driver (sdhost(7D)) Local Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris Secure Digital Slot Driver (sdhost(7D)) Local Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Sun Solaris Secure Digital Slot Driver (sdhost(7D)) Local Code Execution Vulnerability

References:

• Sun Solaris Homepage (Sun Microsystems)
  
• 259408 A Security Vulnerability in the Solaris Secure Digital Slot Driver (sdhos (Sun)