CVE-2009-0207 - OpenCVE

Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors.

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:L/AC:L/Au:S/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Hp	Hp-ux
Oracle	Vrtsvxfs Vrtsodm

Configuration 1 [-]

AND

cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*

cpe:2.3:a:oracle:vrtsodm:3.5:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*

cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*

OR	cpe:2.3:a:oracle:vrtsodm:4.1:::::::*
	cpe:2.3:a:oracle:vrtsodm:5.0:::::::*
	cpe:2.3:a:oracle:vrtsvxfs:4.1:::::::*
	cpe:2.3:a:oracle:vrtsvxfs:5.0:::::::*

References

Link	Resource
http://marc.info/?l=bugtraq&m=123792744311063&w=2	Patch
http://secunia.com/advisories/34419
http://www.securityfocus.com/bid/34226	Patch
http://www.securitytracker.com/id?1021891
http://www.vupen.com/english/advisories/2009/0823
https://exchange.xforce.ibmcloud.com/vulnerabilities/49403
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-25T01:00:00

Updated: 2017-09-28T12:57:01

Reserved: 2009-01-20T00:00:00

Link: CVE-2009-0207

JSON object: View

NVD Information

Status : Modified

Published: 2009-03-25T01:30:00.420

Modified: 2017-09-29T01:33:40.763

Link: CVE-2009-0207

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-24T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "34226", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34226"}, {"name": "34419", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34419"}, {"name": "HPSBUX02409", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "ADV-2009-0823", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"name": "hpux-veritas-unspecified-priv-escalation(49403)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"name": "1021891", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1021891"}, {"name": "SSRT080171", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "oval:org.mitre.oval:def:6352", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-0207", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "34226", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34226"}, {"name": "34419", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34419"}, {"name": "HPSBUX02409", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "ADV-2009-0823", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"name": "hpux-veritas-unspecified-priv-escalation(49403)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"name": "1021891", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1021891"}, {"name": "SSRT080171", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"name": "oval:org.mitre.oval:def:6352", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-0207", "datePublished": "2009-03-25T01:00:00", "dateReserved": "2009-01-20T00:00:00", "dateUpdated": "2017-09-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*", "matchCriteriaId": "972D4ABF-2E80-4902-910D-5BD0CBEC9765", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vrtsodm:3.5:*:*:*:*:*:*:*", "matchCriteriaId": "E4C55364-6E56-4638-ACAE-EAFE8AAE3B22", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*", "matchCriteriaId": "B64BBA96-FB3C-46AC-9A29-50EE02714FE9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*", "matchCriteriaId": "12C73959-3E02-4847-8962-651D652800EE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vrtsodm:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "223E04E3-8BD1-4FAE-B0B2-0D31B186DE97", "vulnerable": false}, {"criteria": "cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4", "vulnerable": false}, {"criteria": "cpe:2.3:a:oracle:vrtsvxfs:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "D3143959-9791-4EBC-B02A-870211DD6EDF", "vulnerable": false}, {"criteria": "cpe:2.3:a:oracle:vrtsvxfs:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "9A2BB361-9948-40D7-ACF9-04F139B86BBC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad inespecifica en HP-UX vB.11.11 corriendo VERITAS Oracle Disk Manager (VRTSodm) v3.5, vB.11.23 version VRTSodm v4.1 o VERITAS File System (VRTSvxfs) v4.1, vB.11.23 corriendo VRTSodm v5.0 o VRTSvxfs v5.0, y vB.11.31 corriendo VRTSodm v5.0 permite a usuarios locales conseguir privilegios de root a trav\u00e9s de vectores desconocidos."}], "id": "CVE-2009-0207", "lastModified": "2017-09-29T01:33:40.763", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-03-25T01:30:00.420", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://marc.info/?l=bugtraq&m=123792744311063&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/34419"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34226"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1021891"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/0823"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}