CVE-2009-0207 - Vulnerability Details - OpenCVE

Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Hp	Hp-ux
Oracle	Vrtsodm Vrtsvxfs

Configuration 1 [-]

AND

cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*

cpe:2.3:a:oracle:vrtsodm:3.5:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*

cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*

OR	cpe:2.3:a:oracle:vrtsodm:4.1:::::::*
	cpe:2.3:a:oracle:vrtsodm:5.0:::::::*
	cpe:2.3:a:oracle:vrtsvxfs:4.1:::::::*
	cpe:2.3:a:oracle:vrtsvxfs:5.0:::::::*

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=123792744311063&w=2
http://secunia.com/advisories/34419
http://www.securityfocus.com/bid/34226
http://www.securitytracker.com/id?1021891
http://www.vupen.com/english/advisories/2009/0823
https://exchange.xforce.ibmcloud.com/vulnerabilities/49403
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-25T01:00:00

Updated: 2024-08-07T04:24:18.242Z

Reserved: 2009-01-20T00:00:00

Link: CVE-2009-0207

Vulnrichment

No data.

NVD

Status : Modified

Published: 2009-03-25T01:30:00.420

Modified: 2024-11-21T00:59:20.960

Link: CVE-2009-0207

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-24T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "34226", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34226"}, {"name": "34419", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34419"}, {"name": "HPSBUX02409", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "ADV-2009-0823", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"name": "hpux-veritas-unspecified-priv-escalation(49403)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"name": "1021891", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1021891"}, {"name": "SSRT080171", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "oval:org.mitre.oval:def:6352", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-0207", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "34226", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34226"}, {"name": "34419", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34419"}, {"name": "HPSBUX02409", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "ADV-2009-0823", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"name": "hpux-veritas-unspecified-priv-escalation(49403)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"name": "1021891", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1021891"}, {"name": "SSRT080171", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "oval:org.mitre.oval:def:6352", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:24:18.242Z"}, "title": "CVE Program Container", "references": [{"name": "34226", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34226"}, {"name": "34419", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34419"}, {"name": "HPSBUX02409", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "ADV-2009-0823", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"name": "hpux-veritas-unspecified-priv-escalation(49403)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"name": "1021891", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1021891"}, {"name": "SSRT080171", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "oval:org.mitre.oval:def:6352", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-0207", "datePublished": "2009-03-25T01:00:00", "dateReserved": "2009-01-20T00:00:00", "dateUpdated": "2024-08-07T04:24:18.242Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*", "matchCriteriaId": "972D4ABF-2E80-4902-910D-5BD0CBEC9765", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vrtsodm:3.5:*:*:*:*:*:*:*", "matchCriteriaId": "E4C55364-6E56-4638-ACAE-EAFE8AAE3B22", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*", "matchCriteriaId": "B64BBA96-FB3C-46AC-9A29-50EE02714FE9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*", "matchCriteriaId": "12C73959-3E02-4847-8962-651D652800EE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vrtsodm:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "223E04E3-8BD1-4FAE-B0B2-0D31B186DE97", "vulnerable": false}, {"criteria": "cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4", "vulnerable": false}, {"criteria": "cpe:2.3:a:oracle:vrtsvxfs:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "D3143959-9791-4EBC-B02A-870211DD6EDF", "vulnerable": false}, {"criteria": "cpe:2.3:a:oracle:vrtsvxfs:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "9A2BB361-9948-40D7-ACF9-04F139B86BBC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad inespecifica en HP-UX vB.11.11 corriendo VERITAS Oracle Disk Manager (VRTSodm) v3.5, vB.11.23 version VRTSodm v4.1 o VERITAS File System (VRTSvxfs) v4.1, vB.11.23 corriendo VRTSodm v5.0 o VRTSvxfs v5.0, y vB.11.31 corriendo VRTSodm v5.0 permite a usuarios locales conseguir privilegios de root a trav\u00e9s de vectores desconocidos."}], "id": "CVE-2009-0207", "lastModified": "2024-11-21T00:59:20.960", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-03-25T01:30:00.420", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/34419"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34226"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1021891"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/34419"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34226"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1021891"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}