CVE-2009-4211: Disa Srr For Solaris

High severity, CVSS 9.3. EPSS: 1.7% chance of exploitation in the next 30 days.

The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.

Affected products

• Disa Srr For Solaris: any version

Published 2009-12-04. Last modified 2026-06-16.