Vulnerability CVE-2009-2012 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2012 (CCN-50980)

Assigned:

2009-06-05

Published:

2009-06-05

Updated:

2009-06-19

Summary:

Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

1.9 Low (CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P)
1.4 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2009-2012

Source: CCN
Type: Sun Alert ID: 260508
A Security Vulnerability in idmap(1M) of OpenSolaris may Allow a Denial of the CIFS (Common Internet File System) Service (DoS)

Source: SUNALERT
Type: Vendor Advisory
260508

Source: CCN
Type: OSVDB ID: 55030
OpenSolaris idmap CIFS Server Unspecified Local DoS

Source: BID
Type: UNKNOWN
35252

Source: CCN
Type: BID-35252
Sun OpenSolaris 'idmap(1M)' Local Denial Of Service Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2009-1519

Source: XF
Type: UNKNOWN
opensolaris-cifs-dos(50980)

Vulnerable Configuration:

Configuration 1:

cpe:/o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:sparc:*:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*

Configuration CCN 1:

cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_102::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_102::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_104::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_104::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_101::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_101::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_105::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_105::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_103::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_103::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_106::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_106::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_107::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_107::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_108::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_109::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_110::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_108::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_109::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_110::x86:*:*:*:*:*

Denotes that component is vulnerable