CVE-2009-3851
Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the "restart daemon."
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.37% probability · 31th percentile
- CISA KEV
- Not listed
- Affected
- sun/solaris
- Source
- cve@mitre.org
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.