Executive Summary

Informations
NameCVE-2009-3621First vendor Publication2009-10-22
VendorCveLast vendor Modification2012-03-19

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score4.9Attack RangeLocal
Cvss Impact Score6.9Attack ComplexityLow
Cvss Expoit Score3.9AuthentificationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3621

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:9921
 
Oval ID: oval:org.mitre.oval:def:9921
Title: net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
Description: net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
Family: unix Class: vulnerability
Reference(s): CVE-2009-3621
Version: 5
Platform(s): Red Hat Enterprise Linux 4
CentOS Linux 4
Oracle Linux 4
Red Hat Enterprise Linux 5
CentOS Linux 5
Oracle Linux 5
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:6895
 
Oval ID: oval:org.mitre.oval:def:6895
Title: Linux Kernel 'unix_stream_connect()' Local Denial of Service Vulnerability
Description: net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
Family: unix Class: vulnerability
Reference(s): CVE-2009-3621
Version: 3
Platform(s): VMWare ESX Server 4
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application2
Os495

Open Source Vulnerability Database (OSVDB)

idDescription
59210Linux Kernel net/unix/af_unix.c AF_UNIX Socket Reconnect Local DoS

Internal Sources (Detail)

SourceUrl
CONFIRMhttp://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=77238f...
http://patchwork.kernel.org/patch/54678/
https://bugzilla.redhat.com/show_bug.cgi?id=529626
FEDORAhttps://www.redhat.com/archives/fedora-package-announce/2009-November/msg0019...
MANDRIVAhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:329
MLISThttp://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://lkml.org/lkml/2009/10/19/50
http://www.openwall.com/lists/oss-security/2009/10/19/2
http://www.openwall.com/lists/oss-security/2009/10/19/4
REDHAThttp://www.redhat.com/support/errata/RHSA-2009-1670.html
http://www.redhat.com/support/errata/RHSA-2009-1671.html
https://rhn.redhat.com/errata/RHSA-2009-1540.html
SECUNIAhttp://secunia.com/advisories/37086
http://secunia.com/advisories/37909
http://secunia.com/advisories/38017
http://secunia.com/advisories/38794
http://secunia.com/advisories/38834
SUSEhttp://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
UBUNTUhttp://www.ubuntu.com/usn/usn-864-1
VUPENhttp://www.vupen.com/english/advisories/2010/0528

Alert History

If you want to see full details history, please login or register.
0
DateInformations
2013-05-10 23:59:29
  • Multiple Updates