Unscored severity · published Aug 7, 2009
CVE-2009-2711
XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensolaris · Sun
snv_01; snv_02; snv_03; snv_04; snv_05; snv_06; +34 more · source: NVD
SO
Solaris · Sun
9.0; 10; 8.0; 9.0; 10 · source: NVD
X1
X11 · X.org
6.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2711
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2711
Vendor Advisory
http://secunia.com/advisories/36170
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
Patch
http://www.securityfocus.com/bid/35964
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838
More from Opensolaris
9.8
CVE-2016-1291
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized…
9.8
CVE-2016-1329
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows…
9.8
CVE-2015-6319
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP…
8.8
CVE-2016-1302
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before…
8.1
CVE-2016-1290
The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC…