CVE-2009-2282: Oracle Opensolaris

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors.

Affected products

• Oracle Opensolaris: from snv_41, up to and including snv_108
• Oracle Solaris: version 10 only

Published 2009-07-01. Last modified 2026-06-16.