CVE-2009-2282

4.6
CVSS v2.0 Base Score
0.39%
LOW RiskEPSS (30th percentile)

The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors.

Published: 7/1/2009
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

4.6

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

0.39%LOW Exploitation Risk
30th percentile

This vulnerability has a 0.39% probability of being exploited in the next 30 days, ranking higher than 30% of all scored CVEs.

CWE Classification

Advertisement